AWS CIRT has launched the Threat Technique Catalog for AWS, aimed at providing customers with insights into adversarial tactics and techniques observed during security investigations. This catalog, developed in collaboration with MITRE, categorizes specific threats to AWS and offers guidance on mitigation and detection to enhance customer security.
KANVAS is an incident response case management tool designed for investigators, featuring a user-friendly desktop interface built in Python. It streamlines workflows by enabling collaboration on spreadsheets, offering visualization tools for attack chains and incident timelines, and integrating various API insights for enhanced data analysis. Key functionalities include one-click data sanitization, MITRE mapping, and reporting capabilities, making it a comprehensive tool for handling cybersecurity incidents.