AWS ConsoleLogin Failed Authentication (6393e346-1977-46ef-8987-ad414a145fad)
Detects failed AWS console login attempts due to authentication failures. Monitoring these events is crucial for identifying potential brute-force attacks or unauthorized access attempts to AWS accounts.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) | Attack Pattern | AWS ConsoleLogin Failed Authentication (6393e346-1977-46ef-8987-ad414a145fad) | Sigma-Rules | 1 |