Detection rules › By event

AWS-account

Event	Rules
DisableRegion	1
EnableRegion	3
GetAlternateContact	1
GetContactInformation	1
PutAlternateContact	1
PutContactInformation	1

DisableRegion

1 detection rules reference this event. View event page.

YARA-L (1)

AWS Enable Or Disable Region severity medium T1535

EnableRegion

3 detection rules reference this event. View event page.

Sigma (1)

AWS EnableRegion Command Monitoring severity medium

YARA-L (1)

AWS Enable Or Disable Region severity medium T1535

Panther (1)

AWS Cloudtrail Region Enabled severity medium T1535

GetAlternateContact

1 detection rules reference this event. View event page.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

GetContactInformation

1 detection rules reference this event. View event page.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

PutAlternateContact

1 detection rules reference this event. View event page.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087

PutContactInformation

1 detection rules reference this event. View event page.

Panther (1)

AWS CloudTrail Account Discovery severity informational T1087