This content is open to everyone — sign in to save your progress, earn points, and unlock module exams.
Topic 6.2 of Cloud Forensics and Incident Investigation
CloudTrail event anatomy, high-value forensic patterns, Athena queries, log integrity validation, and chain of custody.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
Quick Bite
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
External links
Validating CloudTrail Log File Integrity
AWS documentation on CloudTrail digest files and the log file integrity validation process.
Validating CloudTrail Log File Integrity
AWS documentation on CloudTrail digest files and the log file integrity validation process.
AWS CloudTrail Forensics Runbook
AWS sample incident response playbooks including CloudTrail-based forensic investigation runbooks.
AWS CloudTrail Forensics Runbook
AWS sample incident response playbooks including CloudTrail-based forensic investigation runbooks.
Amazon Athena for Security Analytics
AWS documentation for using Athena to analyse CloudTrail, VPC Flow Logs, and ALB access logs.
Amazon Athena for Security Analytics
AWS documentation for using Athena to analyse CloudTrail, VPC Flow Logs, and ALB access logs.
AWS re:Invent: Automating Incident Response and Forensics
AWS re:Invent session on automating EC2 isolation, snapshot creation, and CloudTrail analysis.
AWS re:Invent: Automating Incident Response and Forensics
AWS re:Invent session on automating EC2 isolation, snapshot creation, and CloudTrail analysis.
Quadrant 4 · Self-Assessment
Cloud Forensics and Incident Response
Cloud forensics dimensions, EC2 preservation, LiME, legal admissibility, and forensic tools.
Cloud Security: Complete Assessment
Comprehensive 120-question assessment covering all six chapters of the Cloud Security eBook 2026.
