Service: AWS SQS | Detection.FYI

AWS SQS Queue Purge

Sep 19, 2026 · Domain: Cloud Data Source: AWS Data Source: Amazon Web Services Data Source: AWS SQS Use Case: Threat Detection Use Case: Log Auditing Tactic: Defense Evasion Resources: Investigation Guide Noise: Low Performance: Normal Rule Type: Custom Query (KQL) Platform: AWS Data Source: AWS CloudTrail Service: AWS SQS ·
Share on:

Identifies when an AWS Simple Queue Service (SQS) queue is purged. Purging an SQS queue permanently deletes all messages currently in the queue. Adversaries may use this action to disrupt application workflows, destroy operational data, or impair monitoring and alerting by removing messages that contain evidence of malicious activity.

Read More