Detection rules › By catalog entry

AWS-ses

Catalog entry	Rules
CreateEmailIdentity	1
DeleteEmailIdentity	1
DeleteIdentity	2
PutAccountSendingAttributes	2
PutConfigurationSetSendingOptions	1
UpdateAccountSendingEnabled	2
UpdateConfigurationSetSendingEnabled	1
VerifyDomainDkim	2
VerifyDomainIdentity	2
VerifyEmailIdentity	2
DescribeActiveReceiptRuleSet	1
GetEmailIdentity	1
GetIdentityVerificationAttributes	1
GetSendQuota	2
ListEmailIdentities	1
ListIdentities	1
ListReceiptRuleSets	1
GetAccountSendingEnabled	2
VerifyEmailAddress	1

CreateEmailIdentity

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

AWS SES Service Modification severity medium T1496

DeleteEmailIdentity

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

AWS SES Service Modification severity medium T1496

DeleteIdentity

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

SES Identity Has Been Deleted severity medium T1070

Elastic (1)

AWS SES Email Identity Verified Then Deleted severity medium T1070,T1583,T1583.001

PutAccountSendingAttributes

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Account Email Sending Enabled severity medium T1608

YARA-L (1)

AWS SES Service Modification severity medium T1496

PutConfigurationSetSendingOptions

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

AWS SES Service Modification severity medium T1496

UpdateAccountSendingEnabled

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Account Email Sending Enabled severity medium T1608

YARA-L (1)

AWS SES Service Modification severity medium T1496

UpdateConfigurationSetSendingEnabled

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

AWS SES Service Modification severity medium T1496

VerifyDomainDkim

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Email Identity Verified Then Deleted severity medium T1070,T1583,T1583.001

YARA-L (1)

AWS SES Service Modification severity medium T1496

VerifyDomainIdentity

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Email Identity Verified Then Deleted severity medium T1070,T1583,T1583.001

YARA-L (1)

AWS SES Service Modification severity medium T1496

VerifyEmailIdentity

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Email Identity Verified Then Deleted severity medium T1070,T1583,T1583.001

YARA-L (1)

AWS SES Service Modification severity medium T1496

DescribeActiveReceiptRuleSet

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

GetEmailIdentity

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

GetIdentityVerificationAttributes

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

AWS CloudTrail SES Check Identity Verifications severity informational

GetSendQuota

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

Panther (1)

AWS CloudTrail SES Check Send Quota severity informational

ListEmailIdentities

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

ListIdentities

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

ListReceiptRuleSets

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

GetAccountSendingEnabled

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Enumeration via Long-Term Access Key severity low T1526

Panther (1)

AWS CloudTrail SES Check SES Sending Enabled severity informational

VerifyEmailAddress

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS SES Email Identity Verified Then Deleted severity medium T1070,T1583,T1583.001

Back to all AWS-ses catalog entries