Use Case: Cloud Data Protection

Vendor: Amazon

Product	MITRE ATT&CK® TTP	Content
AWS CloudTrail	T1074 - Data Staged T1113 - Screen Capture T1530 - Data from Cloud Storage Object T1580 - T1580 TA0001 - TA0001 TA0004 - TA0004 TA0007 - TA0007 TA0009 - TA0009	29 Rules 21 Models
Amazon S3	T1580 - T1580	1 Rules 1 Models

Vendor: Google

Product	MITRE ATT&CK® TTP	Content
Google Cloud Platform	T1074 - Data Staged T1113 - Screen Capture T1530 - Data from Cloud Storage Object T1580 - T1580 TA0004 - TA0004 TA0009 - TA0009	12 Rules 11 Models

Vendor: Microsoft

Product	MITRE ATT&CK® TTP	Content
Azure Monitor	T1078 - Valid Accounts T1078.004 - Valid Accounts: Cloud Accounts T1204 - User Execution T1580 - T1580 TA0009 - TA0009	5 Rules 5 Models