Successful brute force attack on S3 Bucket.

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


A successful brute force attack on an S3 bucket was detected. Verify these actions, and if needed, remediate the compromise.

Attribute Value
Type Analytic Rule
Solution Amazon Web Services
ID 31b9e94b-0df6-4a3d-a297-3457b53c5d86
Severity High
Status Available
Kind Scheduled
Tactics DefenseEvasion
Techniques T1562
Required Connectors AWS
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
AWSCloudTrail EventName == "GetObject" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Amazon Web Services