| elastic |
AWS Route 53 Resolver Query Log Configuration Deleted |
production |
2026-09-18 |
| elastic |
AWS S3 Bucket Configuration Deletion |
production |
2026-09-18 |
| elastic |
AWS S3 Bucket Expiration Lifecycle Configuration Added |
production |
2026-09-18 |
| elastic |
AWS S3 Bucket Server Access Logging Disabled |
production |
2026-09-18 |
| elastic |
AWS Security Hub Disabled |
production |
2026-09-18 |
| elastic |
AWS SQS Queue Purge |
production |
2026-09-18 |
| elastic |
AWS First Occurrence of STS GetFederationToken Request by User |
production |
2026-09-18 |
| elastic |
Insecure AWS EC2 VPC Security Group Ingress Rule Added |
production |
2026-09-18 |
| elastic |
AWS WAF Access Control List Deletion |
production |
2026-09-18 |
| elastic |
AWS WAF Rule or Rule Group Deletion |
production |
2026-09-18 |
| elastic |
AWS Backup Resource Enumeration via Long-Term Access Key |
production |
2026-09-18 |
| elastic |
AWS EC2 Deprecated AMI Discovery |
production |
2026-09-18 |
| elastic |
AWS Account Closed |
production |
2026-09-18 |
| elastic |
AWS EventBridge Rule Disabled or Deleted |
production |
2026-09-18 |
| elastic |
AWS S3 Bucket Enumeration or Brute Force |
production |
2026-09-18 |
| elastic |
AWS Backup Vault Deleted or Vault Lock Removed |
production |
2026-09-18 |
| elastic |
AWS CloudTrail Log Updated |
production |
2026-09-18 |
| elastic |
AWS CloudWatch Log Group Deletion |
production |
2026-09-18 |
| elastic |
AWS CloudWatch Log Stream Deletion |
production |
2026-09-18 |
| elastic |
AWS EC2 Encryption Disabled |
production |
2026-09-18 |
| elastic |
AWS EC2 EBS Snapshot Access Removed |
production |
2026-09-18 |
| elastic |
AWS Potential Cryptomining via ECS Task Definition Deployment |
production |
2026-09-18 |
| elastic |
AWS EFS File System Deleted |
production |
2026-09-18 |
| elastic |
AWS IAM Deactivation of MFA Device |
production |
2026-09-18 |
| elastic |
AWS IAM Group Deletion |
production |
2026-09-18 |
| elastic |
AWS KMS Customer Managed Key Disabled or Scheduled for Deletion |
production |
2026-09-18 |
| elastic |
AWS KMS Imported Key Material Deleted |
production |
2026-09-18 |
| elastic |
AWS Lambda Function High-Frequency Invocation by a Single Principal |
production |
2026-09-18 |
| elastic |
AWS RDS DB Instance or Cluster Deleted |
production |
2026-09-18 |
| elastic |
AWS RDS DB Instance or Cluster Deletion Protection Disabled |
production |
2026-09-18 |
| elastic |
AWS RDS Snapshot Deleted |
production |
2026-09-18 |
| elastic |
Potential AWS S3 Bucket Ransomware Note Uploaded |
production |
2026-09-18 |
| elastic |
Excessive AWS S3 Object Encryption with SSE-C |
production |
2026-09-18 |
| elastic |
AWS S3 Bucket MFA Delete Disabled |
production |
2026-09-18 |
| elastic |
AWS S3 Object Encryption Using External KMS Key |
production |
2026-09-18 |
| elastic |
AWS S3 Object Versioning Suspended |
production |
2026-09-18 |
| elastic |
AWS S3 Static Site JavaScript File Uploaded |
production |
2026-09-18 |
| elastic |
Unusual AWS S3 Object Encryption with SSE-C |
production |
2026-09-18 |
| elastic |
AWS AssumeRoleWithWebIdentity from Kubernetes SA and External ASN |
production |
2026-09-18 |
| elastic |
AWS Rare Source AS Organization Activity |
production |
2026-09-18 |