Analytics BIOC
Informational
✕
An AWS Route 53 domain was transferred to another AWS account
An AWS Route 53 domain was transferred to another AWS account.
- Module:
- Cortex Cloud
- Licensed by:
- Cloud Runtime Security (CRS)
- Data source:
- AWS Audit Log
ATT&CK tactics: Resource Development (TA0042)
ATT&CK techniques: Acquire Infrastructure: Domains (T1583.001)
Attacker's goals:
Gain access to DNS records and abuse them for malicious purposes.
Investigative actions:
Check if the domain transfer was done by an authorized user.
- Test period:
- N/A (single event)
- Deduplication:
- 5 Days