Data Source: Amazon Route53 | Detection.FYI

Route53 Resolver Query Log Configuration Deleted

May 22, 2024 · Domain: Cloud Data Source: AWS Data Source: Amazon Web Services Data Source: Amazon Route53 Use Case: Log Auditing Resources: Investigation Guide Tactic: Defense Evasion ·
Share on:

Identifies when a Route53 Resolver Query Log Configuration is deleted. When a Route53 Resolver query log configuration is deleted, Resolver stops logging DNS queries and responses for the specified configuration. Adversaries may delete query log configurations to evade detection or cover their tracks.

Read More