Detection rules › By event

AWS-secretsmanager

Event	Rules
GetSecretValue	4
BatchGetSecretValue	3

GetSecretValue

4 detection rules reference this event. View event page.

Elastic (3)

AWS Secrets Manager Rapid Secrets Retrieval severity medium T1213, T1213.006, T1555, T1555.006
First Time Seen AWS Secret Value Accessed in Secrets Manager severity medium T1555, T1555.006
Multiple Cloud Secrets Accessed by Source Address severity high T1555, T1555.006

Panther (1)

EC2 Secrets Manager Retrieve Secrets severity informational T1552

BatchGetSecretValue

3 detection rules reference this event. View event page.

Panther (3)

AWS Secrets Manager Batch Retrieve Secrets severity informational T1552
AWS Secrets Manager Batch Retrieve Secrets Catch-All severity informational T1552
AWS Secrets Manager Retrieve Secrets Multi-Region severity informational T1552