Detection rules › By catalog entry

AWS-events

Catalog entry	Rules
DeleteRule	1
DisableRule	2
DeleteEventBus	2

DeleteRule

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS EventBridge Rule Disabled or Deleted severity low T1489,T1685

DisableRule

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS EventBridge Rule Disabled or Deleted severity low T1489,T1685

Panther (1)

Account Security Configuration Changed severity medium T1685

DeleteEventBus

2 detection rules reference this catalog entry. View catalog entry.

Kusto (2)

AWSCloudTrail - Failed Attempts to Change AWS CloudTrail Logs severity low T1685,T1685.002
AWSCloudTrail - Successful Tampering with AWS CloudTrail Logs severity high T1685,T1685.002

Back to all AWS-events catalog entries