Novel Technique to Detect Cloud Threat Actor Operations(unit42.paloaltonetworks.com)

https://unit42.paloaltonetworks.com/tracking-threat-groups-through-cloud-logging/