S3 bucket encryption modified

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detected modification of bucket encryption. An attacker could modify encryption of existing buckets for denial of service attacks.

Attribute Value
Type Hunting Query
Solution Amazon Web Services
ID 6eb59239-78c5-401d-acfa-5cb9b3d31cd4
Severity Low
Tactics Impact
Techniques T1486
Required Connectors AWS
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
AWSCloudTrail EventName in "DeleteBucketEncryption,PutBucketEncryption" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Hunting Queries · Back to Amazon Web Services