Detection rules › By event

AWS-workmail

Event	Rules
CreateGroup	1
CreateOrganization	1
CreateUser	1
DeleteGroup	1
DeleteUser	1
RegisterToWorkMail	1
ResetPassword	1

CreateGroup

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

CreateOrganization

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

CreateUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

DeleteGroup

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

DeleteUser

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

RegisterToWorkMail

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134

ResetPassword

1 detection rules reference this event. View event page.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078, T1078.002, T1078.004, T1134