Panther medium experimental python

AWS Authentication From CrowdStrike Unmanaged Device

Detects AWS Logins from IP addresses not found in CrowdStrike's AIP list. May indicate unmanaged device being used, or faulty CrowdStrike Sensor.

View Source

Detection Logic

Field Validations

Loading…

Comments (0)

Loading comments...