Skip to content
Threat Feed
Subscribe

Product

AWS Service Quotas

2 briefs RSS
low advisory

Monitoring AWS CloudTrail Creation for Unauthorized Log Diversion

Adversaries may use the CreateTrail API to establish unauthorized logging configurations that redirect audit data to attacker-controlled destinations or circumvent existing monitoring controls.

AWS CloudTrail +1 cloud aws log-auditing discovery cloudtrail
1r 4t updated
medium advisory

Detection of Anomalous AWS Service Quota Increases

Adversaries with compromised AWS credentials may request service quota increases to facilitate large-scale malicious operations, detectable by identifying rare identities invoking the RequestServiceQuotaIncrease API.

AWS Service Quotas cloud aws resource-development cloudtrail
1t