Tag: SignIn

SignIn

All events with tag SignIn.

AWS ConsoleLogin

Records a sign-in attempt to the AWS Management Console, capturing success or failure status and whether MFA was used.

Cloud Service: AWS - SignIn

Tactics:

Initial Access

Techniques:

T1078.004

Tags:

AWS SignIn

AWS GetSigninToken

Generates a sign-in token used to construct a federation URL for single sign-on to the AWS Management Console.

Cloud Service: AWS - SignIn

Tactics:

Credential Access Initial Access Lateral Movement

Techniques:

T1528

Tags:

AWS SignIn

AWS PasswordRecoveryRequested

Records a request to recover or reset the AWS account root user password via the password reset process.

Cloud Service: AWS - SignIn

Tactics:

Initial Access Credential Access

Techniques:

T1078.004

Tags:

AWS SignIn