Discovering data breaches (or data leaks) is never an easy thing. What I mean by that is figuring out how to deal with the situation once you have discovered the breach or leak is, in my experience, the most difficult part of the entire process.
This chapter will focus on both sides of that story. We will look at methods for discovering data in several common NoSQL databases like MongoDB and Elasticsearch, as well as data located on publicly accessible cloud storage platforms such as Amazon buckets and Digital Ocean spaces. I will also reveal some of my personal discoveries and experiences surrounding those discoveries.
But first, a word from Bob Diachenko, a man who has personally uncovered more high‐profile data leaks than anyone else I know.
Get Hunting Cyber Criminals now with O’Reilly online learning.
O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.