<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Oscar Diaz &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/author/oscar-diaz/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Thu, 03 Sep 2026 21:15:53 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Incident response guide for AWS CloudTrail investigations – Part 2</title>
		<link>https://noise.getoto.net/2026/09/04/incident-response-guide-for-aws-cloudtrail-investigations-part-2/</link>
		
		<dc:creator><![CDATA[Oscar Diaz]]></dc:creator>
		<pubDate>Thu, 03 Sep 2026 21:15:53 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9dd5180b6a958cd54fe8606a499c55f5</guid>

					<description><![CDATA[In Part 1 of this guide, we examined two common incident scenarios: cross-account Amazon Simple Storage Service (Amazon S3) data deletion with ransomware implications, and cryptocurrency mining deployed through AWS CloudFormation using exposed AWS Management Console credentials. We also introduced key incident response terminology and investigative frameworks for analyzing AWS CloudTrail events. In this second […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Incident response guide for AWS CloudTrail investigations – Part 1</title>
		<link>https://noise.getoto.net/2026/09/04/incident-response-guide-for-aws-cloudtrail-investigations-part-1/</link>
		
		<dc:creator><![CDATA[Oscar Diaz]]></dc:creator>
		<pubDate>Thu, 03 Sep 2026 21:15:39 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=c1f2bf4ec0dfae23977e707a161e9ed6</guid>

					<description><![CDATA[AWS CloudTrail logs contain the evidence you need when investigating suspicious activity in your AWS environment, but knowing which fields matter and how to interpret them can mean the difference between surface-level analysis and uncovering the full scope of an incident. This guide walks you through real-world scenarios, showing you how to analyze CloudTrail events […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Monitoring and optimizing the cost of the unused access analyzer in IAM Access Analyzer</title>
		<link>https://noise.getoto.net/2025/05/12/monitoring-and-optimizing-the-cost-of-the-unused-access-analyzer-in-iam-access-analyzer/</link>
		
		<dc:creator><![CDATA[Oscar Diaz]]></dc:creator>
		<pubDate>Mon, 12 May 2025 19:02:46 +0000</pubDate>
				<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[IAM Access Analyzer]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=ebf4477677e4e4a099559cf066e74c93</guid>

					<description><![CDATA[AWS Identity and Access Management (IAM) Access Analyzer is a feature that you can use to identify resources in your AWS organization and accounts that are shared with external entities and to identify unused access. In this post, we explore how the unused access analyzer in IAM Access Analyzer works, dive into the cost implications, […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 20/45 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-26 21:28:47 by W3 Total Cache
-->