CCC.F07: Event Notifications
Description:Publishes events for creation, deletion, and modification of
objects in a way that enables users to trigger actions in response.
Related Threats:
ID | Title | Description |
---|---|---|
CCC.TH10 | Alerts are Intercepted | Malicious actors may exploit event notifications to monitor and intercept information about sensitive operations or access patterns. |
CCC.TH11 | Event Notifications are Incorrectly Triggered | Malicious actors may exploit event notifications to trigger sensitive operations or access patterns. Alternately, attackers may flood the system with notifications to obfuscate another attack or overwhelm the service to disrupt legitimate operations. |