01
detectionlint / library / yara-l
aws_privilege_escalation_using_iam_access_key
Detect when a user creates a new access key for another user and escalates privileges using this newly created access key from the same IP.
Detect when a user creates a new access key for another user and escalates privileges using this newly created access key from the same IP.