Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Wiz
FIN-717
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Not Verified
What It Detects
A Wiz-monitored asset has an unencrypted volume with logging disabled. This combination creates a blind spot where unprotected data can be accessed or exfiltrated without any audit trail. If the volume is compromised, there is no way to determine what data was accessed or when.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Connectors
match
Wiz
Extra Data
and
[{'key': 'Key', 'value': 'wiz.volume_encrypted', 'operator': 'match'}, {'key': 'Value', 'value': 0, 'operator': 'match'}]
Logging Enabled (True/False)
==
0
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum