Tag
medium
advisory
AWS CloudWatch Log Group Deletion
2 rules 3 TTPsDetection of Amazon CloudWatch Log Group deletion via the 'DeleteLogGroup' API by non-AWS Internal user agents, potentially indicating defense evasion or disruption of logging pipelines.
Amazon CloudWatch
cloudwatch
aws
logging
2r
3t
medium
advisory
AWS CloudWatch Log Stream Deletion
2 rules 3 TTPsDetection of Amazon CloudWatch log stream deletion via the 'DeleteLogStream' API, potentially indicating defense evasion or impact by adversaries aiming to conceal activity and disrupt security monitoring.
CloudWatch Logs
aws
cloudwatch
log-deletion
defense-evasion
2r
3t
medium
advisory
AWS CloudWatch Alarm Deletion for Defense Evasion
2 rules 2 TTPsSuccessful deletion of Amazon CloudWatch alarms via the `DeleteAlarms` API, potentially indicating an adversary attempting to impair visibility, silence alerts, and evade detection after malicious activity within an AWS environment.
CloudWatch
defense-evasion
aws
2r
2t