All Detections

AWS SSM Run Command for Remote Execution

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026005

Detects AWS Systems Manager Run Command used for remote code execution on EC2 instances

Microsoft Sentinel (KQL)