ATT&CK technique
View on MITRE ATT&CK →
T1021.008
Direct Cloud VM Connections
Lateral Movement
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | AWS EC2 Multiple SSH Public Keys Uploaded by a Single Identity | production | 2026-09-29 |
| elastic | Azure VM Serial Console Connection with Unusual User and ASN | production | 2026-09-18 |