DET0879 Detection of Cloud Accounts
| Item |
Value |
| ID |
DET0879 |
| Version |
1.0 |
| Created |
21 October 2025 |
| Last Modified |
21 October 2025 |
Technique Detected: T1586.003 (Cloud Accounts)
Analytics
PRE
AN2011
Much of this activity will take place outside the visibility of the target organization, making detection of this behavior difficult. Detection efforts may be focused on related stages of the adversary lifecycle, such as during exfiltration (ex: Transfer Data to Cloud Account).
Log Sources
| Data Component |
Name |
Channel |
|
|
|
Mutable Elements