Search and filter across all detection sources
450 rules
iam_iam [yara]
Auto-generated rule - file iam.exe
iam_iamdll [yara]
Auto-generated rule - file iamdll.dll
iam_iam [malware]
iam_iamdll [malware]
iam_alt_iam_alt [yara]
Auto-generated rule - file iam-alt.exe
iam_alt_iam_alt [malware]
AWS IAM detected
Decoy IAM Assumed
Actor assumed decoy IAM role
IAM Role Created
An IAM role was created.
[GCP] IAM Policy Change
[CISCO-SCA] AWS IAM Anywhere
[GCP-SCC] IAM: Anomalous Grant
AWS IAM Access Analyzer Deleted
Detects when AWS IAM Access Analyzer is deleted.
[CLOUDTRAIL] IAM cloudtrail event detected - (AddClientIDToOpenIDConnectProvider)
[CLOUDTRAIL] IAM cloudtrail event detected - (AddRoleToInstanceProfile)
[CLOUDTRAIL] IAM cloudtrail event detected - (AddUserToGroup)
[CLOUDTRAIL] IAM cloudtrail event detected - (AttachGroupPolicy)
[CLOUDTRAIL] IAM cloudtrail event detected - (AttachRolePolicy)
[CLOUDTRAIL] IAM cloudtrail event detected - (AttachUserPolicy)
[CLOUDTRAIL] IAM cloudtrail event detected - (ChangePassword)
[CLOUDTRAIL] IAM cloudtrail event detected - (ConsoleLogin)
[CLOUDTRAIL] IAM cloudtrail event detected - (CreateAccessKey)
[CLOUDTRAIL] IAM cloudtrail event detected - (CreateAccountAlias)
[CLOUDTRAIL] IAM cloudtrail event detected - (CreateGroup)
[CLOUDTRAIL] IAM cloudtrail event detected - (CreateInstanceProfile)