AWS EFS Fileshare Mount Modified or Deleted (6a7ba45c-63d8-473e-9736-2eaabff79964)
Detects when a EFS Fileshare Mount is modified or deleted. An adversary breaking any file system using the mount target that is being deleted, which might disrupt instances or applications using those mounts.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
AWS EFS Fileshare Mount Modified or Deleted (6a7ba45c-63d8-473e-9736-2eaabff79964) | Sigma-Rules | Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c) | Attack Pattern | 1 |