T1059.009 Cloud API
Subtécnica de T1059 Command and Scripting Interpreter
Adversaries may abuse cloud APIs to execute malicious commands. APIs available in cloud environments provide various functionalities and are a feature-rich method for programmatic access to nearly all aspects of a tenant. These APIs may be utilized through various methods such as command line interpreters (CLIs), in-browser Cloud Shells,…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- AWS IAM S3Browser LoginProfile Creationhightest · aws
- AWS IAM S3Browser Templated S3 Bucket Policy Creationhightest · aws
- AWS IAM S3Browser User or AccessKey Creationhightest · aws
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.