THE LOG RINGS DON'T LIE: HISTORICAL ENUMERATION IN PLAIN SIGHT

Summary from the TLDR InfoSec newsletter

Logs are an essential tool for defenders to monitor for breaches and investigate incidents. However, they can also be a valuable enumeration tool for attackers. This article provides a comprehensive overview of how attackers can abuse logs for enumeration in AWS, Azure, and GCP. Security teams should treat logs with care and enforce the principle of least privilege where possible.