Product
medium
advisory
AWS Config Service Disabling Detection
2 rules 1 TTPDetection of AWS Config Service disabling, potentially indicating an attempt to impair defenses by stopping configuration recording and delivery.
AWS Config +1
attack.defense-impairment
attack.t1562.008
aws
2r
1t
medium
advisory
AWS Config Resource Deletion for Defense Evasion
2 rules 2 TTPsAn adversary may delete AWS Config resources to evade detection, hide prior activity, or weaken governance controls, which reduces security visibility and auditability within an AWS environment.
AWS Config
cloud
defense-evasion
aws
2r
2t
high
advisory
AWS Config Configuration Recorder Stopped
2 rules 2 TTPsDetection of AWS Config configuration recorder being stopped, potentially by an adversary to evade detection and obscure activity.
AWS Config
aws
cloudtrail
defense-evasion
configuration-change
2r
2t