AWS Security

Four investigations. Four completely different environments. One lesson that kept returning: follow the evidence, not the loudest alert. Over the last few weeks, I worked through OffSec’s Dune Phantom challenge series. I considered writing four separate walkthroughs. Instead, I wanted to capture the investigation as a single story—because what made the series memorable was not any individual answer. It was how radically the environment changed from one week to the next while the investigative method stayed the same.