security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update aws_update_login_profile.yml

Browse Source
This commit is contained in:
toffeebr33k
2020-11-21 23:29:49 +08:00
committed by GitHub
parent a786ebd04b
commit 596d1b6e4c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/cloud/aws_update_login_profile.yml
+1 -1
View File
@@ -1,4 +1,4 @@
title: AWS updating an existing login profile
title: Updating the Login Profile of other users on AWS
id: 0a5177f4-6ca9-44c2-aacf-d3f3d8b6e4d2
status: experimental
description: An attacker with the iam:UpdateLoginProfile permission on other users can change the password used to login to the AWS console on any user that already has a login profile setup. With this alert, it is used to detect anyone is changing password on behalf of other users.