We are obligated to have an external auditor run PCI DSS penetration testing and network segmentation testing every year.
Their second request (after a network diagram) is always to create an EC2 instance running Kali.
Which, honestly, confuses me a bit -- all of the packages are available in AL or Ubuntu, so why do they care? I don't know, and I guess I don't care enough to ask. Just give me the attestation document please. :)
Their second request (after a network diagram) is always to create an EC2 instance running Kali.
Which, honestly, confuses me a bit -- all of the packages are available in AL or Ubuntu, so why do they care? I don't know, and I guess I don't care enough to ask. Just give me the attestation document please. :)