Detection rules › By event

AWS-ecs

Event	Rules
DescribeTaskDefinition	1
RegisterTaskDefinition	2
RunTask	2
CreateService	1
StartTask	1

DescribeTaskDefinition

1 detection rules reference this event. View event page.

Sigma (1)

AWS ECS Task Definition That Queries The Credential Endpoint severity medium T1525

RegisterTaskDefinition

2 detection rules reference this event. View event page.

Sigma (1)

AWS ECS Task Definition That Queries The Credential Endpoint severity medium T1525

Elastic (1)

AWS Potential Cryptomining via ECS Task Definition Deployment severity high T1496

RunTask

2 detection rules reference this event. View event page.

Sigma (1)

AWS ECS Task Definition That Queries The Credential Endpoint severity medium T1525

Elastic (1)

AWS Potential Cryptomining via ECS Task Definition Deployment severity high T1496

CreateService

1 detection rules reference this event. View event page.

Elastic (1)

AWS Potential Cryptomining via ECS Task Definition Deployment severity high T1496

StartTask

1 detection rules reference this event. View event page.

Elastic (1)

AWS Potential Cryptomining via ECS Task Definition Deployment severity high T1496