Analyze access logs from AWS S3, GCS, and Azure Blob Storage to spot unusual downloads, unfamiliar IP addresses, and request spikes. Compare activity with normal patterns and prioritize findings for suspected data theft investigations.
- Investigating suspected data theft from cloud storage
- Finding bulk downloads outside normal working hours
- Checking unfamiliar IP addresses and sudden request spikes
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls (GetObject spikes), and potential data exfiltration using statistical baselines and time-series anomaly detection.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026