Analytics BIOC
Informational
✕
AWS Storage Gateway file share enumeration
AWS Storage Gateway file shares were enumerated.
- Module:
- Cortex Cloud
- Licensed by:
- Cloud Runtime Security (CRS)
- Data source:
- AWS Audit Log
ATT&CK tactics: Discovery (TA0007)
ATT&CK techniques: Cloud Infrastructure Discovery (T1580) Cloud Service Discovery (T1526)
Attacker's goals:
Enumerate the organizational structure to plan lateral movement.
Investigative actions:
Review recent activity related to the identity and the affected cloud environment. Check for other enumeration activity or attempts to access sensitive resources.
- Test period:
- N/A (single event)
- Deduplication:
- 5 Days