Automatic image scanning disabled for ECR

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Image Scanning for ECR was disabled, which could lead to missing vulnerable container images in your environment. Attackers could disable the Image Scanning for defense evasion purposes.

Attribute Value
Type Analytic Rule
Solution Amazon Web Services
ID 19602494-94af-43c8-90ba-eb0e14999612
Severity Medium
Status Available
Kind Scheduled
Tactics DefenseEvasion
Techniques T1562
Required Connectors AWS
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
AWSCloudTrail EventName == "PutImageScanningConfiguration" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Amazon Web Services