ATT&CK technique
View on MITRE ATT&CK →
T1485.001
Lifecycle-Triggered Deletion
Impact
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | AWS S3 Bucket Expiration Lifecycle Configuration Added | production | 2026-09-18 |
| elastic | AWS KMS Customer Managed Key Disabled or Scheduled for Deletion | production | 2026-09-18 |
| elastic | AWS KMS Imported Key Material Deleted | production | 2026-09-18 |
| splunk | ASL AWS Defense Evasion PutBucketLifecycle | production | 2026-05-13 |
| splunk | AWS Defense Evasion PutBucketLifecycle | production | 2026-05-13 |