| elastic |
AWS S3 Object Encryption Using External KMS Key |
production |
2026-09-18 |
| elastic |
AWS S3 Object Versioning Suspended |
production |
2026-09-18 |
| elastic |
AWS S3 Static Site JavaScript File Uploaded |
production |
2026-09-18 |
| elastic |
AWS Lambda Function Policy Updated to Allow Cross-Account Invocation |
production |
2026-09-18 |
| elastic |
Unusual AWS S3 Object Encryption with SSE-C |
production |
2026-09-18 |
| elastic |
AWS IAM User Console Login Without MFA |
production |
2026-09-18 |
| elastic |
AWS Sign-In Root Password Recovery Requested |
production |
2026-09-18 |
| elastic |
AWS Sign-In Console Login with Federated User |
production |
2026-09-18 |
| elastic |
AWS Suspicious User Agent Fingerprint |
production |
2026-09-18 |
| elastic |
AWS SSM Session Started to EC2 Instance |
production |
2026-09-18 |
| elastic |
AWS EC2 Instance Connect SSH Public Key Uploaded |
production |
2026-09-18 |
| elastic |
Unusual AWS Command for a User |
production |
2026-09-18 |
| elastic |
AWS IAM Virtual MFA Device Registration Attempt with Session Token |
production |
2026-09-18 |
| elastic |
AWS Lambda Function Policy Updated to Allow Public Invocation |
production |
2026-09-18 |
| elastic |
AWS IAM User Self-Created Access Key Subsequently Used |
production |
2026-09-18 |
| elastic |
AWS IAM User Created Access Keys For Another User |
production |
2026-09-18 |
| elastic |
AWS SES Full Access Policy Attached to IAM Entity by Unusual User |
production |
2026-09-18 |
| elastic |
AWS IAM SAML Provider Created |
production |
2026-09-18 |
| elastic |
AWS IAM Roles Anywhere Trust Anchor Created with External CA |
production |
2026-09-18 |
| elastic |
AWS EC2 Network Access Control List Creation |
production |
2026-09-18 |
| elastic |
AWS EC2 Route Table Modified or Deleted |
production |
2026-09-18 |
| elastic |
AWS IAM Login Profile Created or Modified for an IAM User |
production |
2026-09-18 |
| elastic |
AWS IAM Roles Anywhere Profile Creation |
production |
2026-09-18 |
| elastic |
GCP IAM Service Account Impersonation Role Granted |
production |
2026-09-18 |
| elastic |
GCP Service Account Creation |
production |
2026-09-18 |
| elastic |
GCP Service Account Key Creation |
production |
2026-09-18 |
| elastic |
GCP IAM Service Account Key Deletion |
production |
2026-09-18 |
| elastic |
GKE Creation or Modification of Sensitive Role |
production |
2026-09-18 |
| elastic |
GKE Creation of a RoleBinding Referencing a ServiceAccount |
production |
2026-09-18 |
| elastic |
Rare GCP Audit Failure Event Code |
production |
2026-09-18 |
| elastic |
Spike in GCP Audit Failed Messages |
production |
2026-09-18 |
| elastic |
GCP IAM Custom Role Creation |
production |
2026-09-18 |
| elastic |
GKE Anonymous Request Authorized by Unusual User Agent |
production |
2026-09-18 |
| elastic |
Potential Cookies Theft via Browser Debugging |
production |
2026-09-18 |
| elastic |
GCP Storage Bucket Deletion |
production |
2026-09-18 |
| elastic |
GCP Service Account Disabled |
production |
2026-09-18 |
| elastic |
GCP Service Account Deletion |
production |
2026-09-18 |
| elastic |
GCP IAM Role Deletion |
production |
2026-09-18 |
| elastic |
GCP Virtual Private Cloud Route Deletion |
production |
2026-09-18 |
| elastic |
GCP Virtual Private Cloud Route Creation |
production |
2026-09-18 |