ATT&CK technique
View on MITRE ATT&CK →
T1535
Unused/Unsupported Cloud Regions
Stealth
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Cloud Compute Instance Created In Previously Unused Region | production | 2026-09-22 |
| splunk | AWS Successful Console Authentication From Multiple IPs | production | 2026-05-13 |
| splunk | Detect AWS Console Login by User from New City | production | 2026-05-13 |
| splunk | Detect AWS Console Login by User from New Country | production | 2026-05-13 |
| splunk | Detect AWS Console Login by User from New Region | production | 2026-05-13 |