3 ms·
> I can see how it might be particularly difficult for a cloud provider It is really not, though. Unless they take it very slowly and to locations that are not
by outworlder 4y ago
> I can see how it might be particularly difficult for a cloud provider
It is really not, though. Unless they take it very slowly and to locations that are not suspicious. Even something like GuardDuty on AWS will flag 'interesting' traffic to new locations.
- Zuiii 4y agoI know we already have open source IDS/IPS systems, but do we have something like GuardDuty we can run locally that would detect unusually large outbound traffic over a specific timeframe?