Probably a remote kvm system with QOS monitoring. Many secure systems won’t let you connect directly to sensitive resources from your personal workstation.
But the lag from the infiltrator to that is what was detected. There was presumably no Amazon software installed on the infiltrator’s computer so how can the lag be measured?
Keyboard input over kvm is pretty awful. It’s possible the kvm software was enforcing a delay between keystrokes to make sure they are delivered in order. Seeing keys consistently pressed with 500ms separation would be odd.
How did Amazon know the lag?
Probably a remote kvm system with QOS monitoring. Many secure systems won’t let you connect directly to sensitive resources from your personal workstation.
But the infiltrator hacked the remote worker’s computer.
The actual worker may have been require to use…
https://aws.amazon.com/workspaces/desktop-as-a-service/
But the lag from the infiltrator to that is what was detected. There was presumably no Amazon software installed on the infiltrator’s computer so how can the lag be measured?
Keyboard input over kvm is pretty awful. It’s possible the kvm software was enforcing a delay between keystrokes to make sure they are delivered in order. Seeing keys consistently pressed with 500ms separation would be odd.