Welcoming the AWS Customer Incident Response Team

The AWS Customer Incident Response Team (CIRT) overview explains their 24/7 support for customers during security events, describes the Threat Technique Catalog (TTC) based on the MITRE ATT&CK Cloud Matrix, lists open-source tools and training workshops, and gives guidance on how to engage CIRT through AWS Support or account teams; it emphasizes using AWS logs (CloudTrail, VPC Flow Logs, GuardDuty) for investigations and recommends DFIR partners for host-level analysis.