All Detections

AWS STS AssumeRole Misuse

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Identifies the suspicious use of AssumeRole. Attackers could move laterally and escalate privileges.

Sigma