Detection rules › By event

AWS-workdocs

Event	Rules
CreateUser	1
DeleteUser	1

CreateUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

DeleteUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134