AWS S3 Bucket Versioning Disable (a136ac98-b2bc-4189-a14d-f0d0388e57a7)
Detects when S3 bucket versioning is disabled. Threat actors use this technique during AWS ransomware incidents prior to deleting S3 objects.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Inhibit System Recovery - T1490 (f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a) | Attack Pattern | AWS S3 Bucket Versioning Disable (a136ac98-b2bc-4189-a14d-f0d0388e57a7) | Sigma-Rules | 1 |