Cloud incident investigation
Use a hypothetical cloud account compromise to outline detection signals, investigation steps and response actions. Explain how you would test whether your detection catches unauthorized activity.
The Cloud Response SME develops detection use cases and supports investigation and response to cloud incidents.
Source posting