AWS IAM S3Browser User or AccessKey Creation (db014773-d9d9-4792-91e5-133337c0ffee)

Detects S3 Browser utility creating IAM User or AccessKey.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cloud API - T1059.009 (55bb4471-ff1f-43b4-88c1-c9384ec47abf)	Attack Pattern	AWS IAM S3Browser User or AccessKey Creation (db014773-d9d9-4792-91e5-133337c0ffee)	Sigma-Rules	1
Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	AWS IAM S3Browser User or AccessKey Creation (db014773-d9d9-4792-91e5-133337c0ffee)	Sigma-Rules	1
Cloud API - T1059.009 (55bb4471-ff1f-43b4-88c1-c9384ec47abf)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	2