Product
low
advisory
Rapid Enumeration of AWS S3 Buckets
2 rules 4 TTPsAn AWS principal rapidly enumerates S3 bucket posture using read-only APIs, indicative of reconnaissance, scanning, or post-compromise activity.
AWS S3 +1
aws
s3
cloudtrail
discovery
enumeration
reconnaissance
2r
4t
high
advisory
S3Browser IAM Policy Creation with Default Bucket Name
2 rules 3 TTPsAn AWS IAM policy is created by the S3Browser utility with the default S3 bucket name placeholder, potentially indicating unauthorized access or misconfiguration.
AWS IAM +1
aws
iam
s3browser
s3
policy
cloudtrail
2r
3t