Files
blue-team-tools/rules/cloud
Ivan S 3ae99cfc57 Merge PR #5021 from @saakovv - New rules for AWS
new: AWS Console Login Monitoring
new: AWS Bucket Deleted
new: AWS ConsoleLogin Failed Authentication
new: AWS EnableRegion Command Monitoring
new: AWS VPC Flow Logs Deleted
update: AWS Successful Console Login Without MFA - only alert on successful logins

---------

Co-authored-by: nasbench <nasbench@users.noreply.github.com>
Co-authored-by: swachchhanda000 <swachchhandashrawan@gmail.com>
2025-10-22 14:36:42 +02:00
..