AWS Detect Attach To Role Policy

Description

This search provides detection of an user attaching itself to a different role trust policy. This can be used for lateral movement and escalation of privileges.

   Help

AWS Detect Attach To Role Policy Help

You must install splunk AWS add-on and Splunk App for AWS. This search works with cloudwatch logs

   Search

Open in Search