Detection rules › By catalog entry

AWS-waf

Catalog entry	Rules
DeleteIPSet	1
DeleteLoggingConfiguration	1
DeleteRule	2
DeleteRuleGroup	2
DeleteWebACL	2

DeleteIPSet

1 detection rules reference this catalog entry. View catalog entry.

Splunk (1)

AWS Defense Evasion Impair Security Services severity medium T1685,T1685.002

DeleteLoggingConfiguration

1 detection rules reference this catalog entry. View catalog entry.

Splunk (1)

AWS Defense Evasion Impair Security Services severity medium T1685,T1685.002

DeleteRule

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS WAF Rule or Rule Group Deletion severity medium T1685,T1686.001

Splunk (1)

AWS Defense Evasion Impair Security Services severity medium T1685,T1685.002

DeleteRuleGroup

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS WAF Rule or Rule Group Deletion severity medium T1685,T1686.001

Splunk (1)

AWS Defense Evasion Impair Security Services severity medium T1685,T1685.002

DeleteWebACL

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

AWS WAF Access Control List Deletion severity medium T1685,T1686.001

Splunk (1)

AWS Defense Evasion Impair Security Services severity medium T1685,T1685.002

Back to all AWS-waf catalog entries