AWS S3 Bucket Versioning Disable — Detection Rule

Detects when S3 bucket versioning is disabled. Threat actors use this technique during AWS ransomware incidents prior to deleting S3 objects.

Read the full analysis on IntelFusions