Detection rules › By catalog entry

AWS-account

Catalog entry	Rules
DisableRegion	1
EnableRegion	3
GetAlternateContact	1
GetContactInformation	1
PutAlternateContact	1
PutContactInformation	1

DisableRegion

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

AWS Enable Or Disable Region severity medium T1535

EnableRegion

3 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

AWS EnableRegion Command Monitoring severity medium

YARA-L (1)

AWS Enable Or Disable Region severity medium T1535

Panther (1)

AWS Cloudtrail Region Enabled severity medium T1535

GetAlternateContact

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

GetContactInformation

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

PutAlternateContact

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

PutContactInformation

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

Back to all AWS-account catalog entries