Vpc-Flow-Logs

EC2 Instance Communicating with Malicious IP — Incident Response

Your VPC flow logs show an EC2 instance sending traffic to a known malicious IP address. Walk through containment, forensic investigation, …