Skip to content
Threat Feed
Subscribe

Product

AWS CloudWatch Logs

1 brief RSS
high advisory

AWS Security Services Impairment via Deletion Operations

Attackers attempt to impair or disable AWS security services such as GuardDuty, WAF, CloudWatch, Route 53 and CloudWatch Logs by deleting detectors, rule groups, IP sets, web ACLs, logging configurations, alarms and log streams, in order to evade detection and operate undetected.

AWS GuardDuty +4 aws cloudtrail defense-evasion
3r 1t