Blog Post

Microsoft Sentinel Blog
4 MIN READ

Hunting for Capital One Breach TTPs in AWS logs using Azure Sentinel - Part I

Ashwin_Patil's avatar
Ashwin_Patil
Icon for Microsoft rankMicrosoft
Nov 18, 2019
Introduction In July 2019, Capital one suffered one of the biggest data breaches affecting more than 100 million customer accounts and credit card applications. Based on the criminal complaint char...
Updated Nov 03, 2021
Version 3.0
hunting
microsoft sentinel
cteodor's avatar
cteodor
Copper Contributor
Dec 10, 2019

Uhm, on step 2 you did aws configure --profile cloudgoat but later on after "verify that config and credential files are  correctly populated" we can see only [default], are you using the profile or the default settings?