AWS Successful Console Authentication From Multiple IPs
Compromise Accounts, Unused/Unsupported Cloud Regions
Compromise Accounts, Unused/Unsupported Cloud Regions
Automated Exfiltration
Web Shell, External Remote Services
Steal Application Access Token
Exploit Public-Facing Application, External Remote Services