sigma-rules

Files

T

Isai 215d5a0861 [New Rule] AWS S3 Object Encryption Using External KMS Key (#3861 )

* [New Rule] AWS S3 Object Encryption Using External KMS Key

Identifies encryption events for S3 bucket objects using an AWS KMS key from an external account. Adversaries with access to a misconfigured S3 bucket and the proper permissions may encrypt objects with an external KMS key to deny their victims access to their own data.

* Update impact_s3_object_encryption_with_external_key.toml

* Update impact_s3_object_encryption_with_external_key.toml

* missing coma after tag

* missing backslash on technique reference

2024-07-05 12:25:55 -04:00

aws

[New Rule] AWS S3 Object Encryption Using External KMS Key (#3861 )

2024-07-05 12:25:55 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647 )

2024-05-06 07:32:02 -05:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819 )

2024-07-01 10:31:26 -04:00

beaconing

Add exceptions to C2 Beaconing Activity (#3771 )