Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

This article explains that AWS console activity can generate an overwhelming number of CloudTrail events, making it difficult for defenders to determine actual user actions. Two researchers from Permiso Security are releasing an open-source tool called Cloud Console Cartographer to map raw events into higher-level signals (user actions), enrich logs with classifications, and provide a web interface to reduce noise while preserving raw data.