Detection rules › By catalog entry

AWS-sagemaker

Catalog entry	Rules
CreateAutoMLJob	1
CreateNotebookInstance	1
CreateNotebookInstanceLifecycleConfig	1
CreatePipeline	1
CreateProcessingJob	1
CreateTrainingJob	1
UpdateNotebookInstanceLifecycleConfig	1

CreateAutoMLJob

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078,T1078.004

CreateNotebookInstance

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078,T1078.004

CreateNotebookInstanceLifecycleConfig

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Notebook Lifecycle Configuration With Suspicious Script Content severity high T1059,T1059.004,T1546

CreatePipeline

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078,T1078.004

CreateProcessingJob

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078,T1078.004

CreateTrainingJob

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078,T1078.004

UpdateNotebookInstanceLifecycleConfig

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SageMaker Notebook Lifecycle Configuration With Suspicious Script Content severity high T1059,T1059.004,T1546

Back to all AWS-sagemaker catalog entries