AWS STS GetSessionToken Misuse — Detection Rule

Identifies the suspicious use of GetSessionToken. Tokens could be created and used by attackers to move laterally and escalate privileges.

Read the full analysis on IntelFusions