Tool

github.com/ramimac/aws-customer-security-incidents

https://github.com/ramimac/aws-customer-security-incidents

Published on: github.com

ATT&CK techniques those detections carry

T1059Command and Scripting Interpreter
T1059.006Python
T1069Permission Groups Discovery
T1069.003Cloud Groups
T1530Data from Cloud Storage
T1537Transfer Data to Cloud Account
T1567Exfiltration Over Web Service
T1567.002Exfiltration to Cloud Storage
+1 more

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Potential Third-Party Cloud Storage Client Execution	Medium	Elastic detection rules	Sep 29, 2026	Elastic License 2.0
Cloud Offensive Framework Execution	Medium	Elastic detection rules	Sep 29, 2026	Elastic License 2.0

Showing 2 of 2

Filter in the catalogue