Use Case: Cloud Threat Detection | Detection.FYI

AWS S3 Static Site JavaScript File Uploaded

Sep 19, 2026 · Domain: Cloud Data Source: AWS Data Source: Amazon Web Services Data Source: AWS S3 Tactic: Impact Use Case: Web Application Compromise Use Case: Cloud Threat Detection Resources: Investigation Guide Noise: Low Performance: Normal Rule Type: ES|QL Platform: AWS Service: AWS S3 ·
Share on:

This rule detects when a JavaScript file is uploaded in an S3 static site directory (static/js/) by an IAM user or assumed role. This can indicate suspicious modification of web content hosted on S3, such as injecting malicious scripts into a static website frontend.

Read More