Aegis
All events
// Operations

Cloud Api Call

GetCallerIdentity by arn:aws:iam::4419:user/gsimmons succeeded

EVT-4EF218Info

Same principal

Other activity for gsimmons around this time

Hunt
TimeEventSeverityHost
2026-09-04 16:37:51ZAuthentication SuccessInfoWS-FIN-003
2026-09-04 17:09:10ZAuthentication SuccessInfoWS-FIN-012
2026-09-04 17:43:31ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 18:00:51ZAuthentication SuccessInfoWS-FIN-006
2026-09-04 18:12:48ZAuthentication SuccessInfoWS-FIN-011

Same source address

Other activity from 10.4.12.34

TimeEventUserCountry
2026-09-04 17:06:42ZNetwork Deny——
2026-09-04 17:36:06ZAuthentication FailurebpatelUSA
2026-09-04 17:55:08ZAuthentication FailurefokoyeUSA
2026-09-04 18:03:56ZAuthentication SuccesslgarciaUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
GetCallerIdentity
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.