AWS Defense Evasion - Update CloudTrail

This analytic detects `UpdateTrail` events in AWS CloudTrail logs where the user agent is not the AWS console and the operation is successful. This activity indicates an attempt to modify CloudTrail settings, which could be done to evade logging and hinder visibility into AWS account activities. If confirmed malicious, this could allow attackers to operate undetected, compromising the integrity and security of the AWS environment.