2026 Critical Cloud Control Plane Detection: AWS Organizations MoveAccount/DetachPolicy Guardrail Evasion
Detects suspicious modifications to AWS Organization structure, specifically the moving of accounts out of protected organizational units (e.g., security, quarantine, guardrail), accounts leaving the organization, or the detachment of policies, which may indicate an attempt to evade security controls or organizational guardrails.
Cortex XDR
