Detection rules › By event

AWS-sagemaker

Event	Rules
CreateAutoMLJob	1
CreateNotebookInstance	1
CreateNotebookInstanceLifecycleConfig	1
CreatePipeline	1
CreateProcessingJob	1
CreateTrainingJob	1
UpdateNotebookInstanceLifecycleConfig	1

CreateAutoMLJob

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078, T1078.004

CreateNotebookInstance

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078, T1078.004

CreateNotebookInstanceLifecycleConfig

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Notebook Lifecycle Configuration With Suspicious Script Content severity high T1059, T1059.004, T1546

CreatePipeline

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078, T1078.004

CreateProcessingJob

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078, T1078.004

CreateTrainingJob

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Execution Role Passed by Unusual Principal severity high T1078, T1078.004

UpdateNotebookInstanceLifecycleConfig

1 detection rules reference this event. View event page.

Elastic (1)

AWS SageMaker Notebook Lifecycle Configuration With Suspicious Script Content severity high T1059, T1059.004, T1546