Aegis
All events
// Operations

Cloud Api Call

DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded

EVT-049A66Info

Same principal

Other activity for bpatel around this time

Hunt
TimeEventSeverityHost
2026-09-03 20:01:59ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 20:08:35ZAuthentication SuccessInfoWS-FIN-001
2026-09-03 20:34:19ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 20:36:56ZAuthentication SuccessInfoWS-FIN-001
2026-09-03 21:25:45ZAuthentication SuccessInfoWS-FIN-008
2026-09-03 21:52:54ZAuthentication SuccessInfoWS-FIN-008

Same source address

Other activity from 10.4.12.28

TimeEventUserCountry
2026-09-03 21:07:10ZAuthentication SuccesslgarciaUSA
2026-09-03 21:14:33ZAuthentication SuccessdnakamuraUSA
2026-09-03 21:19:29ZAuthentication SuccesscdiazUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
DescribeSecurityGroups
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.