DC0022 Cloud Storage Deletion
| Item | Value |
|---|---|
| ID | DC0022 |
| Version | 2.0 |
| Created | 20 October 2021 |
| Last Modified | 12 November 2025 |
Log Sources
| Name | Channel |
|---|---|
| AWS:CloudTrail | DeleteBucket, DeleteDBCluster, DeleteSnapshot, TerminateInstances |
Detection Strategy
| ID | Name | Technique Detected |
|---|---|---|
| DET0329 | Behavioral Detection for T1490 - Inhibit System Recovery | T1490 |
| DET0146 | Detection of Data Destruction Across Platforms via Mass Overwrite and Deletion Patterns | T1485 |