aws#

ATT&CK Navigator View#

2 Datasets#

Created

Dataset

Description

Tags

Contributors

2022/02/18

AWS S3 Honey Bucket Logs

This dataset represents adversaries trying to scan , discover and access open S3 honeybucket based on known hostname patterns. in this case honeybucket microsoft-devtest.s3.amazonaws.com.

[‘S3 Public Honeybucket Discovery’]

Ashwin Patil @ashwinpatil

2020/09/13

AWS Cloud Bank Breach S3

This dataset represents adversaries abusing a misconfigured EC2 reverse proxy to obtain instance profile keys and eventually exfiltrate files from an S3 bucket.

[‘EC2 Proxy Abuse’, ‘S3 Data Exfiltration’]

Roberto Rodriguez @Cyb3rWard0g