AWS S3 Bucket Versioning Disabled

SigmaHQ Detections@sigmaHQ

•updated Sep 2, 2024•1•0•30

Detects when AWS S3 bucket versioning is disabled. This action can be a precursor to data deletion or modification without the ability to recover previous versions, often seen in ransomware attacks targeting cloud storage.