Analytics BIOC
Informational
✕
An AWS Lambda function was modified
An AWS Lambda function was modified.
- Module:
- Cortex Cloud
- Licensed by:
- Cloud Runtime Security (CRS)
- Data source:
- AWS Audit Log
ATT&CK tactics: Execution (TA0002)
ATT&CK techniques: Serverless Execution (T1648)
Attacker's goals:
Modification of Lambda functions may provide attackers access to run code against cloud environments.
Investigative actions:
Check what modifications were made to the AWS Lambda function.
- Test period:
- N/A (single event)
- Deduplication:
- 5 Days