Detection rules › By event

AWS-identitystore

Event	Rules
CreateGroup	1
CreateUser	1
DeleteGroup	1
DeleteUser	1

CreateGroup

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

CreateUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

DeleteGroup

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

DeleteUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134