Skip to content
Threat Feed
Subscribe

Tag

Amazon-Guardduty

1 brief RSS
high advisory

AWS GuardDuty Member Account Manipulation

Adversaries manipulate Amazon GuardDuty member accounts within an AWS organization by using API calls such as `DisassociateFromAdministratorAccount`, `DeleteMembers`, `StopMonitoringMembers`, or `DeleteInvitations` to break centralized security visibility, enabling them to operate undetected in compromised member accounts.

Amazon GuardDuty cloud aws defense-evasion amazon-guardduty
1r 1t