Skip to content
Threat Feed

Tag

Aws-Account

1 brief RSS
high advisory

AWS CloudTrail Logging Stopped for Defense Evasion

Detection of AWS CloudTrail StopLogging events indicates a potential defense evasion attempt by an attacker to operate stealthily within a compromised AWS environment and hinder incident response.

Splunk Enterprise +3 aws cloudtrail defense-evasion aws-account
2r 1t