Skip to content

Hide Navigation Hide TOC

AWS EC2 Disable EBS Encryption (16124c2d-e40b-4fcc-8f2c-5ab7870a2223)

Identifies disabling of default Amazon Elastic Block Store (EBS) encryption in the current region. Disabling default encryption does not change the encryption status of your existing volumes.

Cluster A Galaxy A Cluster B Galaxy B Level
Data Manipulation - T1565 (ac9e6b22-11bf-45d7-9181-c1cb08360931) Attack Pattern AWS EC2 Disable EBS Encryption (16124c2d-e40b-4fcc-8f2c-5ab7870a2223) Sigma-Rules 1
AWS EC2 Disable EBS Encryption (16124c2d-e40b-4fcc-8f2c-5ab7870a2223) Sigma-Rules Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0) Attack Pattern 1