turned our AV alerts into auto-carves to dump into an S3 bucket for our Sirt team. They seemed to like that

Next implement http://www.binaryalert.io/ to scan the S3!?? 🙂

rofl! already done 🙂