Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Wiz
FIN-748
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Not Verified
What It Detects
An internet-facing asset has an access key that has not been rotated in over 90 days. Stale keys have had more time to be exposed through code repositories, logs, or configuration leaks, and the public-facing nature of this asset increases the likelihood of discovery and exploitation.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Connectors
match
Wiz
Extra Data
and
[{'key': 'Key', 'value': 'wiz.access_key_in_90_days', 'operator': 'match'}, {'key': 'Value', 'value': 0, 'operator': 'match'}]
Public Facing (True/False)
==
1
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum