SOP-11: Cloud Infrastructure Attack Response

Analyst playbook for cloud infrastructure compromise — IAM abuse, privilege escalation, rogue resource deploy, snapshot exfiltration, log tampering, KQL hunts, and full Azure / AWS containment.