Volver al hub

Cloud Credential Violation IOMs

This query outputs all identified indicators of misconfigurations (IOMs) related to credentials.

Cloudmonitoring
FDR intermediatepor CrowdStrike (cql-hub.com) 1 min read

Query

CloudService="IAM" | in(field="policy_id", values=["576", "1", "466", "1006", "12", "15", "16", "18", "13", "17", "450", "577", "451", "8"])
| groupBy([PolicyStatement])

Explicación

Importado desde cql-hub.com. Agrega explicación de pipes aquí.

Variables a ajustar

Revisa y ajusta los valores según tu entorno.