Cloud Credential Violation IOMs
This query outputs all identified indicators of misconfigurations (IOMs) related to credentials.
CQL · Falcon Next-Gen SIEMCopy query
CloudService="IAM" | in(field="policy_id", values=["576", "1", "466", "1006", "12", "15", "16", "18", "13", "17", "450", "577", "451", "8"])
| groupBy([PolicyStatement])cloud_credential_violation_ioms.yml
CrowdStrike
Monitoring
Cloud
CSPM / ASPM / DSPM
2025-08-26
2025-11-01
