Modification or Deletion of an AWS RDS Cluster (457cc9ac-d8e6-4d1d-8c0e-251d0f11a74c)
Detects modifications to an RDS cluster or its deletion, which may indicate potential data exfiltration attempts, unauthorized access, or exposure of sensitive information.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Automated Exfiltration - T1020 (774a3188-6ba9-4dc4-879d-d54ee48a5ce9) | Attack Pattern | Modification or Deletion of an AWS RDS Cluster (457cc9ac-d8e6-4d1d-8c0e-251d0f11a74c) | Sigma-Rules | 1 |