Product
medium
advisory
Unusual AWS Batch Job Container Command Override Detection
1 rule 1 TTPThis detection targets the abuse of AWS Batch 'containerOverrides.command' parameters by infrequent users to inject malicious commands or data exfiltration logic into production compute environments.
AWS Batch
cloud
aws
batch
cloudtrail
execution
1r
1t
high
advisory
AWS S3 Bucket Replication Abuse via Batch Service for Data Exfiltration
2 rules 2 TTPsAttackers can abuse the AWS Batch service to exfiltrate data from S3 buckets by creating malicious batch jobs that leverage S3 bucket replication.
AWS S3 +1
aws
s3
data-exfiltration
batch-service
2r
2t