PoC demo for HITB Amsterdam 2021 PoC for this presentation Playing hide-n-seek with AWS GuardDuty: Post-DNS era covert channel for C&C and data exfiltration Note: The PoC is only tested on Python 3.9 Disclaimer: The contents expressed in this presentation are solely my own and do not express the views or opinions of my employer.