Analytics Alerts
Browse the Cortex analytics alert reference.
1 alert match the current filters. technique: T1583 ✕
Show ATT&CK heatmapAn AWS Route 53 domain was transferred to another AWS account Informational Cloud
An AWS Route 53 domain was transferred to another AWS account.
- Activation:
- 14 Days
- Training:
- 30 Days
- Test:
- N/A (single event)
- Deduplication:
- 5 Days
ATT&CK tactics: Resource Development (TA0042)ATT&CK techniques: Acquire Infrastructure: Domains (T1583.001)Required data: AWS Audit LogAttacker's goals: Gain access to DNS records and abuse them for malicious purposes.Investigative actions: Check if the domain transfer was done by an authorized user.