Detect Spike in AWS Security Hub Alerts for User
Email Collection, Remote Email Collection
Scheduled Task, Scheduled Task/Job
Process Injection, Create or Modify System Process, Parent PID Spoofing, Access Token Manipulation
Command and Scripting Interpreter, PowerShell