6 ms·
I'm sure its awkward but they appear to be an equal opportunity reporter - https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vulnerabilities-how-isolated
by jcims 5y ago
I'm sure its awkward but they appear to be an equal opportunity reporter - https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vulnerabilities-how-isolated-is-your-cloud-environment https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vul...
Their product is pretty interesting. I did a demo a while back and their approach of building a large graph and doing a good amount of reachability (network and entitelement) leads to some useful signal. It's not entirely novel, JupiterOne has been doing something in the same vein for years now but it seems to work well. Still feels a bit rough around the edges but i thought it was interesting and could work well in situations where simple checkbox-style config analysis falls short.
- keiko-z 5y agoI was able to leverage JupiterOne to identify the misconfiguration mentioned in the Wiz article across all my AWS accounts in a single query. Pretty nifty. They shared that query and a bunch more in this blog: https://try.jupiterone.com/my-bucket-my-data-or-is-it https://try.jupiterone.com/my-bucket-my-data-or-is-it