New Detections for AWS CloudTrail
New Release
Your AWS CloudTrail findings now cover four more behaviors: an AWS Bedrock model invoked for the first time, an EKS cluster endpoint reconfigured to allow public access, and the reuse of IAM users and access keys that had been dormant for a long period. All four are mapped to MITRE ATT&CK.