New Detection for AWS CloudTrail

Your AWS CloudTrail findings now flag an IAM role that is assumed after going unused for more than 90 days. It joins the existing detections for dormant IAM users and access keys, and is mapped to MITRE ATT&CK.

Learn More

• Use of an AWS IAM Role That Was Unused for a Long Period
• AWS CloudTrail Data Origin
• AlphaSOC Detections