Snowflake Threat Hunting Guide
Excerpt
Mandiant Threat Hunting Guide
Snowflake
v1.0
Summary
This document contains threat hunting guidance and queries for detecting abnormal and
malicious activity across Snowflake customer database instances. Default retention policies
for the relevant views enable threat hunting across the past 1 year (365 days).
Created: June 17, 2024
2
Table of Contents
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Mandiant (Google) on services.google.com.
More from Mandiant (Google)32
- Investigating Ephemeral Supply Chain TamperingMandiant (Google) · Published 15 Oct
- ARMORY CASTLE Exploits BeyondTrustMandiant (Google) · Published 15 Oct
- Mandiant Cybersecurity ConsultingMandiant (Google) · Added 18 Oct
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
