Panther medium experimental python
AWS Authentication From CrowdStrike Unmanaged Device
Detects AWS Logins from IP addresses not found in CrowdStrike's AIP list. May indicate unmanaged device being used, or faulty CrowdStrike Sensor.
Detection Logic
Field Validations
Loading…
Comments (0)
Loading comments...