Skip to content
Threat Feed
Subscribe

Tag

Attack.t1562.006

1 brief RSS
medium advisory

This rule detects changes to AWS CloudTrail configurations that could indicate a security risk, specifically disabling or altering trails, or failing a security configuration check. Such actions can significantly reduce visibility into AWS activity.

AWS CloudTrail attack.impact attack.defense_evasion attack.t1562.001 attack.t1562.006
3r