4 ms·
AWS will send you an alert because your machine is behaving unusually. No need for local protection! /s sort of
by doubled112 3y ago
AWS will send you an alert because your machine is behaving unusually. No need for local protection!
/s sort of
- kstrauser 3y agoSeriously, that’s a legit plan. If you use GuardDuty, you can have it trigger EBS volume scans to look for malware if it sees strange behavior. I spun up an EC2 instance and ran an nmap port scan on another server and a bitcoin daemon. It caught both of those, triggered scans, and reported its findings. I’m heading down that road instead of running a traditional on-OS process.
- doubled112 3y agoYes, exactly, and you skip an agent. The agents take more resources than the services on some of my machines, which is lunacy if you ask me, but we have to check those audit boxes and the security team isn’t very capable…err…creative.
- kstrauser 3y agoI was a platform engineer before I was officially a security engineer. I’m very protective of our happy little servers and try to find ways to avoid installing awfulness on them.