MITRE ATT&CK CloudTrail Enrichment

This product is not supported for your selected Datadog site. ().

Overview

The MITRE ATT&CK CloudTrail Enrichment pack

This pack tags CloudTrail logs with MITRE ATT&CK tactics and techniques.

What this pack does:

  • Tags events with MITRE techniques
  • Maps logins, IAM changes, and execution events
  • Flags events as security-relevant