All Detections

AWS IAM Access Denied Discovery Events

avatar
Google SecOps@GoogleSecOps
updated Jan 30, 2025001

Detects excessive AccessDenied events within an hour timeframe from an IAM User

YARA-L