AWS EFS Fileshare Mount Modified or Deleted (6a7ba45c-63d8-473e-9736-2eaabff79964)
Detects when a EFS Fileshare Mount is modified or deleted. An adversary breaking any file system using the mount target that is being deleted, which might disrupt instances or applications using those mounts.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c) | Attack Pattern | AWS EFS Fileshare Mount Modified or Deleted (6a7ba45c-63d8-473e-9736-2eaabff79964) | Sigma-Rules | 1 |