Billions Served Processing Security Event Logs with the AWS Serverless Stack - Josh Liburdi

Abstract: Security event and audit logs are a foundational requirement for threat hunting, threat detection, and incident response, but most security teams have little to no control over their data and rely on vendors who charge thousands of dollars per day for “log management.” There must be a better way!

In this talk we will discuss the challenges, best practices, and secrets for building large scale, affordable data processing systems using the AWS serverless stack, including how to choose the …

audit aws aws serverless charge control data detection event event logs hunting incident incident response josh log log management logs management response security security teams serverless stack teams threat threat detection threat hunting vendors