Aegis
All events
// Operations

Cloud Api Call

GetCallerIdentity by arn:aws:iam::4419:user/cdiaz succeeded

EVT-363003Info

Same principal

Other activity for cdiaz around this time

Hunt
TimeEventSeverityHost
2026-09-04 15:13:38ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 15:17:56ZAuthentication SuccessInfoWS-FIN-011
2026-09-04 15:22:23ZAuthentication SuccessInfoWS-FIN-005
2026-09-04 16:49:23ZAuthentication SuccessInfoWS-FIN-012
2026-09-04 16:57:47ZAuthentication SuccessInfoWS-FIN-009

Same source address

Other activity from 10.4.12.30

TimeEventUserCountry
2026-09-04 15:53:05ZAuthentication FailureekowalskiUSA
2026-09-04 16:43:35ZAuthentication SuccessekowalskiUSA
2026-09-04 16:45:08ZAuthentication SuccessbpatelUSA
2026-09-04 16:57:47ZAuthentication SuccesscdiazUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
GetCallerIdentity
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.