Rule Library
Sigma Rules
2 rules found for "Darin Smith"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
AWS ECS Task Definition That Queries The Credential Endpoint
Detects when an Elastic Container Service (ECS) Task Definition includes a command to query the credential endpoint. This can indicate a potential adversary adding a backdoor to establish persistence or escalate privileges.
AWScloudtrail
Darin SmithTue Jun 07cloud
Detectionmediumtest
AWS Snapshot Backup Exfiltration
Detects the modification of an EC2 snapshot's permissions to enable access from another account
AWScloudtrail
Darin SmithMon May 17cloud