AWS Snapshot Backup Exfiltration (abae8fec-57bd-4f87-aff6-6e3db989843d)
Detects the modification of an EC2 snapshot's permissions to enable access from another account
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Transfer Data to Cloud Account - T1537 (d4bdbdea-eaec-4071-b4f9-5105e12ea4b6) | Attack Pattern | AWS Snapshot Backup Exfiltration (abae8fec-57bd-4f87-aff6-6e3db989843d) | Sigma-Rules | 1 |