All Detections

Restore Public AWS RDS Instance

avatar
SigmaHQ Detections@sigmaHQ
updated Aug 12, 2024000

Detects the recovery of a new public database instance from a snapshot. It may be a part of data exfiltration.

Sigma