seth-goodwin cae5fee025 [New Rule] Add AWS Password Recovery Requested

2020-07-07 15:38:52 -06:00

..

collection_cloudtrail_logging_created.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

credential_access_iam_user_addition_to_group.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_cloudtrail_logging_deleted.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_cloudtrail_logging_suspended.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_cloudwatch_alarm_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_configuration_recorder_stopped.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_ec2_flow_log_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_ec2_network_acl_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_guardduty_detector_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_s3_bucket_configuration_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_waf_acl_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

defense_evasion_waf_rule_group_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_cloudtrail_logging_updated.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_cloudwatch_log_group_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_cloudwatch_log_stream_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_ec2_disable_ebs_encryption.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_iam_deactivate_mfa_device.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_iam_group_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_rds_cluster_deletion.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

impact_rds_instance_cluster_stoppage.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

initial_access_console_login_root.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

initial_access_password_recovery.toml

[New Rule] Add AWS Password Recovery Requested

2020-07-07 15:38:52 -06:00

persistence_ec2_network_acl_creation.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

persistence_iam_group_creation.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

persistence_rds_cluster_creation.toml

Populate rules/ directory.

2020-06-29 22:57:03 -06:00

privilege_escalation_root_login_without_mfa.toml

[New Rule] AWS Root Login Without MFA

2020-07-07 15:07:17 -06:00

privilege_escalation_updateassumerolepolicy.toml

[New Rule] Add rule for AWS UpdateAssumeRolePolicy

2020-07-07 15:38:18 -06:00