file-3A-2F-2F-2F : The URL-encoded representation of file:/// , the protocol used to read local files from a system's drive.
Detection checks and example queries
Configure Workload Identity Federation.
Indicators of compromise (IoCs) to look for callback-url-file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials
Example (Python):