Summary

The use of cloud computing has introduced new sets of challenges to organizations that were previously prepared for IR on conventional physical and local IT environments. According to the SANS Institute, despite the dissimilarities between clouds and the disparity between traditional and cloud IT environments, a single IR process can be used. However, it is essential to know about the typical incidents that can be encountered in the cloud. We considered the MITRE ATT&CK cloud matrix, which was created to help organizations familiarize themselves with the full attack process through the lens of the different stages that attackers follow. Many types of threats and vulnerabilities are included in the attack matrix, including insecure APIs, account hijacking, and insider threats, among others.

Traditional security approaches might be inefficient and insufficient to handle cloud security threats. Hence, organizations are adopting a new approach to security referred to as...