Cado Response In Action: Investigating ECS Fargate

AWS Fargate is a serverless service that provides the option of fully managed and abstracted infrastructure for containerized applications managed using AWS ECS. Since AWS Fargate is a managed service, getting the data you need to investigate a potential compromise becomes more complex.

This playbook covers the AWS services you are most likely to encounter during security incidents in AWS. More specifically, it highlights tips for investigating and recovering from incidents in these various services including: EC2, EKS, ECS, Lambda, and more.

This two minute demonstration walks through a simple example of investigating a compromised ECS Fargate Instance.