Product
VPC Flow Logs
- First Reported
- Aug 21, 2024
- Latest Reported
- Sep 4, 2024
Reported Context (2)
- In addition, tampered logging policies were restored, additional logging including VPC Flow Logs were configured, and specific detection rules were added to the SIEM. As weeks went by since these initial eradication and Responders Traced a Hybrid Cloud Attack from AWS to a Phishing-Infected Home Computer
- the thread of initial suspicious events, the team was able to leverage context from CloudTrail logs, VPC Flow logs, and forensic artifacts from the EC2 instance, to quickly put the pieces of the puzzle together. Due Cloud Team Detects Kubernetes-to-AWS Privilege Escalation Through Contextual Investigation
MITRE ATT&CK (5)
Vendors (2)
Products (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.