FrostyNeighbor Archives

The AWS Threat Hunting Library — 7 hunts every cloud SOC should run · HackForLab AWS Threat Hunting series hub

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

⚙ AWS THREAT HUNTING · CORNERSTONE LIBRARY · 2026 EDITION The Amazon Web Services attack surface is broader than most...

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

AWS THREAT HUNTING · PART 07 OF 07 · 2026 An attacker who compromises the right role in your AWS...

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

AWS THREAT HUNTING · PART 06 OF 07 · 2026 If your most valuable data lives in S3 and your...

EventBridge and SNS as Covert C2 — hunting AWS-native messaging abuse · HackForLab AWS Threat Hunting Part 5

EventBridge and SNS as Covert C2: Hunting Native AWS Messaging Abuse

AWS THREAT HUNTING · PART 05 OF 07 · 2026 When adversaries route command-and-control through native AWS messaging — EventBridge...

Hunting CI/CD Compromise in AWS: CodeBuild, CodePipeline, and the Buildspec Backdoor

AWS THREAT HUNTING · PART 04 OF 07 · 2026 An attacker who compromises your CI/CD pipeline owns every artefact...

HACKFORALB successfully completed threat hunting for following attack…

DNS Reconnaissance, Domain Generation Algorithm (DGA), Robotic Pattern Detection, DNS Shadowing , Fast Flux DNS , Beaconing , Phishing , APT , Lateral Movement , Browser Compromised , DNS Amplification , DNS Tunneling , Skeleton key Malware , Advance Persistent Threats, Low and Slow attacks , DoS, Watering Hole Attack Detection, Weh Shell , DNS Water Torch Attack , Intrusion Detection, Cookie visibility and theft, User login Session hijacking, Broken Trust, Pass the Hash, Session fixation, Honey Token account suspicious activities, Data Snooping / Data aggregation, Cross Channel Data Egress, Banking fraud detection, Chopper Web shell

Tag: FrostyNeighbor

Weekly Threat Advisory: Top Cyber Adversaries May 11 – 17, 2026

Recent Posts

Hackforlab Category

FaceBook Page

SIEM | UEBA

GridView List Posts Widget

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

EventBridge and SNS as Covert C2: Hunting Native AWS Messaging Abuse

Hunting CI/CD Compromise in AWS: CodeBuild, CodePipeline, and the Buildspec Backdoor

Cyber Threat Attacks / Hunting

Cyber Deception

FOLLOW US

CYBER THREAT CATEGORIES

Top Cyber Security Articles

Threat Hunting Scenarios

Weekly Threat Advisory: Top Cyber Adversaries May 11 – 17, 2026

Recent Posts

Hackforlab Category

SOCIAL HACKFORLAB

FaceBook Page

SIEM | UEBA

GridView List Posts Widget

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

EventBridge and SNS as Covert C2: Hunting Native AWS Messaging Abuse

Hunting CI/CD Compromise in AWS: CodeBuild, CodePipeline, and the Buildspec Backdoor

Cyber Threat Attacks / Hunting

Cyber Deception