The document discusses automated infrastructure security monitoring using the ELK stack and AWS Lambda, highlighting the use of Elastalert to defend against SSH brute force attacks. It details the architecture, use cases, and specific implementations to enhance security, including IP whitelisting and real-time logging. The presentation also emphasizes the need for more attack signatures and discusses potential alternatives to the current stack.
Related topics: