T1078.A002: Account Root User
Source: aws-samples.github.io
Published:
<p>AWS Specific Content A prerequisite for this technique is that a threat actor has already gained control of an AWS account root user. This technique identifies when a threat actor uses the root user to perform unauthorized actions. When you first create an Amazon Web Services (AWS) account, you b