Invictus-AWS documentation!
Invictus-AWS is a python script that will help automatically enumerate and acquire relevant data from an AWS environment. The tool doesn’t require any installation it can be run as a standalone script with minimal configuration required. The goal for Invictus-AWS is to allow incident responders or other security personnel to quickly get an insight into an AWS environment to answer the following questions:
What services are running in an AWS environment.
For each of the services what are the configuration details.
What logging is available for each of the services that might be relevant in an incident response scenario.
Is there any threat that I can find easily with the CloudTrail logs.
Want to know more about this project? We did a talk at FIRST Amsterdam 2022 and the slides are available here: https://github.com/invictus-ir/talks/blob/main/FIRST_2022_TC_AMS_Presentation.pdf
Note
🆘 Incident Response support reach out to cert@invictus-ir.com or go to https://www.invictus-ir.com/247
Getting Help
Have a bug report or feature request? Open an issue on the Github repository : https://github.com/invictus-ir/Invictus-AWS .