CmdID

CmdID / Techniques

T1526 Cloud Service Discovery

An adversary may attempt to enumerate the cloud services running on a system after gaining access. MITRE ATT&CK

1 Sigma rule T1526 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first
highPUA - Seatbelt ExecutionNasreddine Bencherchali (Nextron Systems) · Windows