Aegis
All events
// Operations

Cloud Api Call

ListBuckets by arn:aws:iam::4419:user/cdiaz succeeded

EVT-4582DEInfo

Same principal

Other activity for cdiaz around this time

Hunt
TimeEventSeverityHost
2026-09-03 13:15:13ZAuthentication SuccessInfoWS-FIN-011
2026-09-03 13:50:29ZAuthentication SuccessInfoWS-FIN-008
2026-09-03 14:03:21ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 14:10:25ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 14:13:59ZAuthentication SuccessInfoWS-FIN-003
2026-09-03 14:16:40ZAuthentication SuccessInfoWS-FIN-005
2026-09-03 14:31:47ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.27

TimeEventUserCountry
2026-09-03 14:13:59ZAuthentication SuccesscdiazUSA
2026-09-03 14:28:42ZAuthentication SuccessfokoyeUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
ListBuckets
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.