Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Accelerate security investigations with Kiro CLI
Excerpt
When a security event occurs in your Amazon Web Services (AWS) environment, rapid response is critical. However security teams often struggle with time-consuming, manual processes that slow down investigations. Analysts must recall complex AWS Command Line Interface (AWS CLI) syntax for multiple services, manually correlate findings across Amazon GuardDuty , AWS CloudTrail , and other security tools, and document every investigation step for compliance requirements. They make…
Read the original report →Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | 22d200f8670dbdb3e253a90eee5098477c95c23d | High | Score 82/100 | First seen |
| MD5 | 58cddb4e8705cde3f595ef5805f50491 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…