corpus.blog
41,554 blogs · 5,149,205 posts Claim your blog
Record · corpus.blog/posts/01a0d4a0-4836-7245-96fd-928cb572ba22

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Unit 42 · published 9 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
22
Words captured
3,199

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.paloaltonetworks.com/cortex/cloud
paloaltonetworks.com
https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment
paloaltonetworks.com
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html
docs.aws.amazon.com
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingBucket.html
docs.aws.amazon.com
https://docs.cloud.google.com/logging/docs/export/configure_export_v2
docs.cloud.google.com
https://docs.cloud.google.com/logging/docs/buckets
docs.cloud.google.com
https://docs.cloud.google.com/logging/docs/routing/managed-encryption
docs.cloud.google.com
https://docs.aws.amazon.com/athena/latest/ug/what-is.html
docs.aws.amazon.com
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-log-file-validation-intro.html
docs.aws.amazon.com
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html
docs.aws.amazon.com
https://docs.cloud.google.com/logging/docs/store-log-entries
docs.cloud.google.com
https://www.paloaltonetworks.com/cortex/cloud/runtime-security
paloaltonetworks.com
https://cloud.google.com/logging/docs/export/aggregated_sinks_overview
cloud.google.com
https://docs.cloud.google.com/pubsub/docs/overview
docs.cloud.google.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/AWS-CloudTrail-has-been-stopped
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/AWS-CloudTrail-modification
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/GCP-logging-sink-modification
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/GCP-Logging-Bucket-Deletion
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/CloudTrail-logging-deletion
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/GCP-logging-sink-deletion
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/Logging-was-impaired-via-external-encryption-key
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/Suspicious-activity-on-logging-bucket
docs-cortex.paloaltonetworks.com
Elsewhere on unit42.paloaltonetworks.com (1)