v1.1.3

What's Changed

• New events: Encrypting buckets for compliance and ransom - How Attackers Can Use KMS to Ransomware S3 Buckets by @adanalvarez in #26
• New events: Datadog threat roundup: top insights for Q4 2024 by @adanalvarez in #27

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

• Missing events: Unit42 - Attack Paths Into VMs in the Cloud by @adanalvarez in #22
• New events: Tales from the cloud trenches: Unwanted visitor by @adanalvarez in #23
• New events: New Developments in LLM Hijacking Activity by @adanalvarez in #24
• New events: Leaked Environment Variables Allow Large-Scale Extortion Operation in Cloud Environments by @adanalvarez in #25

Full Changelog: v1.1.1...v1.1.2

v1.1.1

What's Changed

• update subtechniques by @SaschaDietsch in #20
• Minor fixes and format by @adanalvarez in #21

Full Changelog: v1.1.0...v1.1.1

v1.1.0

What's Changed

• update TTPs for AWS Services by @SaschaDietsch in #11

What's New

Enhanced MITRE ATT&CK Coverage

mitreAttackSubTechniques: Added a new object that provides detailed information about observed MITRE ATT&CK sub-techniques related to the event. This helps you understand adversary tactics with greater precision.

unverifiedMitreAttackTechniques: Introduced a new object listing potential MITRE ATT&CK techniques that might be linked to the event but have not been verified in the wild. This offers early insight into possible attack vectors.

Full Changelog: v1.0.11...v1.1.0

v1.0.11

What's Changed

• New events: When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying by @adanalvarez in #19

Full Changelog: v1.0.10...v1.0.11

v1.0.10

What's Changed

• New events: CloudStrike - Cloud-Conscious Tactics, Techniques, and Procedures (TTPs) & UpdateSMLProvider research by @adanalvarez in #17
• Add log examples to web by @adanalvarez in #18

Full Changelog: v1.0.9...v1.0.10

v1.0.9

What's Changed

• New example logs with grimoire by @adanalvarez in #16

Full Changelog: v1.0.8...v1.0.9

v1.0.8

What's Changed

• New events: AWS - New tactics and techniques for proactive threat detection by @adanalvarez in #15

Full Changelog: v1.0.7...v1.0.8

v1.0.7

What's Changed

• New events: Datadog - Raiding for AWS vaults, buckets and secrets by @adanalvarez in #13
• New events: Paloalto - Attack Paths Into VMs in the Cloud by @adanalvarez in #14

Full Changelog: v1.0.6...v1.0.7

v1.0.6

What's Changed

• Correct CloudFront eventNames by @SaschaDietsch in #12

New Contributors

• @SaschaDietsch made their first contribution in #12

Full Changelog: v1.0.5...v1.0.6