Aegis
All events
// Operations

Cloud Api Call

DescribeSecurityGroups by arn:aws:iam::4419:user/jmercier succeeded

EVT-A01484Info

Same principal

Other activity for jmercier around this time

Hunt
TimeEventSeverityHost
2026-09-03 20:17:32ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 20:36:59ZAuthentication SuccessInfoWS-FIN-002
2026-09-03 20:51:37ZAuthentication SuccessInfoWS-FIN-012
2026-09-03 21:28:28ZAuthentication SuccessInfoWS-FIN-012
2026-09-03 21:42:44ZAuthentication SuccessInfoWS-FIN-005

Same source address

Other activity from 10.4.12.31

TimeEventUserCountry
2026-09-03 20:05:22ZAuthentication SuccesskthompsonUSA
2026-09-03 20:17:32ZAuthentication SuccessjmercierUSA
2026-09-03 20:26:04ZAuthentication SuccessgsimmonsUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
DescribeSecurityGroups
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.