Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects access to the AWS CLI credentials file (~/.aws/credentials) in a user's home directory, used by CISA's red team to harvest long-lived static IAM access keys.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
5014