Product
medium
advisory
AWS RDS Snapshot Deletion Detected
3 rules 2 TTPsThe deletion of AWS RDS DB snapshots or disabling backups via configuration changes can inhibit recovery, destroy forensic evidence, and prepare for destructive actions by adversaries.
Amazon RDS
aws
rds
snapshot
backup
datadestruction
3r
2t
medium
advisory
AWS RDS DB Instance or Cluster Deleted
2 rules 1 TTPAn adversary with sufficient permissions may delete RDS resources such as DB instances or clusters to impede recovery, destroy evidence, or inflict operational impact on the environment.
Amazon RDS +1
cloud
aws
rds
datadestruction
2r
1t
high
advisory
AWS RDS Master User Password Reset Detection
2 rules 2 TTPsDetection of unauthorized master user password resets for Amazon RDS DB instances via AWS CloudTrail logs, potentially leading to sensitive data access and data breaches.
Amazon RDS
cloud
aws
credential-access
rds
2r
2t