Aegis
All events
// Operations

Cloud Api Call

DescribeSecurityGroups by arn:aws:iam::4419:user/lgarcia succeeded

EVT-AB0431Info

Same principal

Other activity for lgarcia around this time

Hunt
TimeEventSeverityHost
2026-09-04 11:12:36ZAuthentication SuccessInfoWS-FIN-007
2026-09-04 11:20:55ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 12:16:13ZAuthentication FailureLowWS-FIN-010
2026-09-04 12:45:21ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 12:52:24ZAuthentication FailureLowWS-FIN-012
2026-09-04 12:53:27ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.27

TimeEventUserCountry
2026-09-04 11:20:59ZAuthentication SuccessekowalskiUSA
2026-09-04 11:39:30ZAuthentication FailurefokoyeUSA

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
DescribeSecurityGroups
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.