加密货币溯源
原名：Convert to Cryptocurrency
该技能教授安全团队如何检测和响应未经授权的访问，提升安全防护与应急响应能力。
- 分类
- 开发提效
- 版本
- v1.1
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 2
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-09-07
- TRACE 评分
- 0 / 5
内容概览
- When cloud billing alerts indicate unexpected compute cost spikes - When GuardDuty generates CryptoCurrency or Impact finding types - When investigating compromised IAM credentials that may be used to launch mining instances - When monitoring container workloads for unauthorized process execution - When establishing proactive detection controls against resource hijacking attacks Do not use for legitimate cryptocurrency mining operations, for non-cloud mining detection on physical hardware, or for general malware analysis unrelated to mining activity. - Amazon GuardDuty enabled with Runtime Monitoring for EC2, ECS, and EKS - CloudWatch or Azure Monitor configured for compute utilization alerting - VPC Flow Logs enabled for network traffic analysis to mining pool IPs - AWS Cost Anomaly Detection or Azure Cost Management alerts configured Deploy detection across four signal categories: co…