Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Wiz
FIN-716
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Not Verified
What It Detects
A Wiz-monitored asset has an unencrypted volume with versioning disabled. This dual-control failure means data is unprotected by encryption AND has no version history for recovery. Ransomware, accidental deletion, or malicious overwrites result in permanent, irrecoverable data loss of plaintext content.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Connectors
match
Wiz
Extra Data
and
[{'key': 'Key', 'value': 'wiz.volume_encrypted', 'operator': 'match'}, {'key': 'Value', 'value': 0, 'operator': 'match'}]
Versioning Enabled (True/False)
==
0
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum