security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule Deprecations] AWS Rule Deprecations (#5568)

Browse Source 
Completing the Deprecation process for these rules as they have been shipped at least 2 release cycles with "Deprecated - " prefix.

All have the following metadata changes

maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
This commit is contained in:
Isai
2026-01-20 16:05:39 -05:00
committed by GitHub
parent 9e6bf04e82
commit 5f4f9d206f
9 changed files with 27 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/aws/defense_evasion_elasticache_security_group_creation.toml → rules/_deprecated/defense_evasion_elasticache_security_group_creation.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/07/19"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/18"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Austin Songer"]
rules/integrations/aws/defense_evasion_elasticache_security_group_modified_or_deleted.toml → rules/_deprecated/defense_evasion_elasticache_security_group_modified_or_deleted.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/07/19"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/18"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Austin Songer"]
rules/integrations/aws/exfiltration_ec2_vm_export_failure.toml → rules/_deprecated/exfiltration_ec2_vm_export_failure.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/04/22"
integration = ["aws"]
maturity = "production"
updated_date = "2025/10/23"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic", "Austin Songer"]
rules/integrations/aws/impact_rds_group_deletion.toml → rules/_deprecated/impact_rds_group_deletion.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/06/05"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/21"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic", "Austin Songer"]
rules/integrations/aws/impact_rds_instance_cluster_stoppage.toml → rules/_deprecated/impact_rds_instance_cluster_stoppage.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2020/05/20"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/21"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic"]
rules/integrations/aws/persistence_rds_cluster_creation.toml → rules/_deprecated/persistence_rds_cluster_creation.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2020/05/20"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/21"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic"]
rules/integrations/aws/persistence_rds_group_creation.toml → rules/_deprecated/persistence_rds_group_creation.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/06/05"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/21"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic", "Austin Songer"]
rules/integrations/aws/persistence_rds_instance_creation.toml → rules/_deprecated/persistence_rds_instance_creation.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2021/06/06"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/21"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic", "Austin Songer"]
rules/integrations/aws/persistence_redshift_instance_creation.toml → rules/_deprecated/persistence_redshift_instance_creation.toml
+3 -2
View File
@@ -1,8 +1,9 @@
[metadata]
creation_date = "2022/04/12"
integration = ["aws"]
maturity = "production"
updated_date = "2025/11/25"
maturity = "deprecated"
updated_date = "2026/01/16"
deprecation_date = "2026/01/16"
[rule]
author = ["Elastic"]