2
You can check for changes in the IP location of the request or user-agent info sent in request headers. This will not solve the problem 100% but can help in providing tighter security.
Also, there is another very reliable way to detect session hijacking. This method is called "rotating refresh tokens". It basically uses two tokens (access and refresh tokens)...
1
There are many aspects to answer this.
CloudFront endpoints are deployed in so-called Edge locations where the traffic enters the AWS global infrastructure. Any traffic between CloudFront and your EC2 should only be routed over AWS infrastructure and not through any 3rd party operators.
Update: AWS Global Infrastructure page says: All data flowing across ...
1
You should really be using Advanced Audit Policies now, and set them for all computers via group policy. The Advanced policies are more granular and provide more specific info.
The article on the Audit Account Lockout policy describes the recommended GPO settings - basically, audit failure for everything, DCs, member servers, workstations. (The categories ...
Only top voted, non community-wiki answers of a minimum length are eligible
