TLDR InfoSec · STRATEGIES & TACTICS

TRUFFLEHOG NOW DETECTS AWS CANARIES WITHOUT SETTING THEM OFF

trufflesecurity.com5 min read

Summary from the TLDR InfoSec newsletter

Truffle Security performed a scraping project to generate a list of Amazon Account IDs that are used by Thinkst to generate AWS canaries. The Truffle Security team identified about a half dozen Account IDs which can be used to identify if an AWS Key ID is a canary token. The capability has been added to the open-source TruffleHog tool.