EpochZero Learn
EpochZero LearnMulti-Domain Tech Learning Hub
Courses
LeaderboardAbout
Dashboard
EpochZero
EpochZero Learn
Multi-Domain Tech Learning Hub

Structured learning for Reverse Engineering, Cloud Security, Cryptography, and Web Development. Articles, videos, tests, and peer discussion.

Learn

  • Learning Path
  • All Articles
  • Video Lessons
  • Podcast
  • eBooks & PDFs
  • Question Banks
  • Cheatsheets
  • MCQ Banks

Tests & Forum

  • All Tests
  • REMA Tests
  • Cloud Tests
  • Forum
  • REMA Forum
  • Cloud Forum
  • Crypto Forum
  • Web Dev Forum

Campus

  • REMA Club
  • Full Stack Dev Club
  • Extension Activity
  • Events
  • CTF Competitions
  • Workshops
  • Industrial Visits

Platform

  • Dashboard
  • Leaderboard
  • About
  • Verify Certificate

© 2026 EpochZero Learn. Educational content for learning purposes.

Course Instructor: Ashish Revar

This content is open to everyone — sign in to save your progress, earn points, and unlock module exams.

Sign inCreate account
Cloud Threats and Attack Vectors
LearnCloudUnit 29

Topic 2.9 of Cloud Threats and Attack Vectors

Cloud Threat Intelligence & Indicators of Compromise

Cloud-specific IOC categories, threat intelligence sources, GuardDuty finding types, integration workflows, and CERT-In advisory consumption.

~25 min total·4 quadrants of structured content

By the end of this topic, you will

  • Distinguish cloud behavioural IOCs from traditional file/network IOCs
  • List five GuardDuty finding types and explain what each indicates
  • Describe how AWS Security Lake enables unified threat intelligence querying
  • Apply the 3-step IOC response rule to a confirmed GuardDuty finding
Q1 · E-TUTORIAL (1)Q2 · E-CONTENT (1)Q3 · WEB RESOURCES (8)Q4 · SELF-ASSESSMENT (2)

Quadrant 1 · e-Tutorial

Video lectures and walkthroughs

Quadrant 2 · e-Content

Articles and case studies

cloud-security

Cloud Threat Intelligence & Indicators of Compromise

Cloud threat intelligence extends beyond IP and domain blocklists to include IAM event patterns, anomalous API calls, and cloud-specific IOCs. This article covers threat intelligence sources, IOC categories, and how to operationalise intelligence in AWS and Azure environments.

18 min read

Quadrant 3 · Web Resources

Downloadable material and curated external links

Downloadable reference material

EBook

Cloud Security — eBook

v2026

Open resource

Cheatsheet

Cloud Security — Cheatsheet

v2026

Open resource

MCQ Bank

Cloud Security — MCQ Bank

v2026

Open resource

Question Bank

Cloud Security — Question Bank

v2026

Open resource

External links

AWS GuardDuty Finding Types Reference

Complete reference for all AWS GuardDuty finding types with severity and description.

CERT-In Security Advisories Portal

CERT-In official portal for vulnerability advisories and security alerts for Indian organisations.

MITRE ATT&CK Navigator for Cloud

Interactive ATT&CK Navigator for mapping detection coverage against cloud techniques.

AWS Security Lake Documentation

AWS Security Lake for centralised OCSF-formatted security data across accounts and sources.

Quadrant 4 · Self-Assessment

Test your knowledge — earn a certificate on first pass

Cloud Threats, Attacks and Privacy

CSA Top 10, SSRF/IMDS, IMDSv2, EDoS, man-in-the-cloud, STRIDE, MITRE ATT&CK for Cloud, and data residency.

20 questions30 minPass: 60%

Cloud Security: Complete Assessment

Comprehensive 120-question assessment covering all six chapters of the Cloud Security eBook 2026.

120 questions120 minPass: 60%