Digital forensics and security: Automate audits, investigations and response with AWX and Ansible
Source: YouTube · SANS Digital Forensics and Incident Response · published Dec 11, 2025 · 31:38
The speaker details a methodology for repurposing AWX and Ansible to automate audit, compliance, and digital forensic investigations across hybrid infrastructures, eliminating the need for intrusive agents.
Key Takeaways:
• Speaker Aleandro has extensive experience in IT, security, and forensics 0:00.
• The talk emphasizes working with available tools to solve complex problems 0:27.
• The concept originated when a colleague used Ansible and AWX for cross-platform configuration 0:36.
• The speaker explains how Ansible and AWX enable agentless automation for security tasks 0:55.
This session demonstrates how open-source automation tools can replace commercial solutions for scalable, defensible, and agentless security operations.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
The next speaker, Aleandro, please come forward. He's has been in IT forever. IT, I it security, forensics, >> a lot of things, [laughter] >> a lot of things. Come, please, please come forward. >> And um one of the we were discussing yesterday about the motivation for his talk and and I love the idea. It's like and and I think we've heard this throughout the day. is like sometimes you just need to work with what you have and sometimes you have a lot, right? Yes. Uh all start two or three years ago um ago when I was an employee in a firm uh my colleague said me that he was using anible and wx for software distribution and configuration of Windows, Linux and Cisco switches. So uh asked him to explain me uh how it works, how what can do anible and wx uh together and from that start a new idea…