Analytics Alerts
Browse the Cortex analytics alert reference.
1 alert match the current filters. tactic: TA0007 ✕ technique: T1201 ✕
Show ATT&CK heatmapAWS Password Policy Discovery Informational Cloud
A cloud identity has viewed the AWS account password policy.
- Activation:
- 14 Days
- Training:
- 30 Days
- Test:
- N/A (single event)
- Deduplication:
- 5 Days
ATT&CK tactics: Discovery (TA0007)ATT&CK techniques: Password Policy Discovery (T1201)Required data: AWS Audit LogAttacker's goals: Obtaining the account password policy facilitates password brute-force attacks and enables lateral movement.Investigative actions: Investigate any unusual activity originating from the suspected identity.