Search and filter across all detection sources
223 rules
[AWS-IAM] Identity and Access Management event detected (AddClientIDToOpenIDConnectProvider)
[AWS-IAM] Identity and Access Management event detected (AddUserToGroup)
[AWS-IAM] Identity and Access Management event detected (ChangePassword)
[AWS-IAM] Identity and Access Management event detected (CreateAccessKey)
[AWS-IAM] Identity and Access Management event detected (CreateAccountAlias)
[AWS-IAM] Identity and Access Management event detected (CreateGroup)
[AWS-IAM] Identity and Access Management event detected (CreateLoginProfile)
[AWS-IAM] Identity and Access Management event detected (CreateOpenIDConnectProvider)
[AWS-IAM] Identity and Access Management event detected (CreateSAMLProvider)
[AWS-IAM] Identity and Access Management event detected (CreateServiceSpecificCredential)
[AWS-IAM] Identity and Access Management event detected (CreateUser)
[AWS-IAM] Identity and Access Management event detected (DeactivateMFADevice)
[AWS-IAM] Identity and Access Management event detected (DeleteAccessKey)
[AWS-IAM] Identity and Access Management event detected (DeleteAccountAlias)
[AWS-IAM] Identity and Access Management event detected (DeleteAccountPasswordPolicy)
[AWS-IAM] Identity and Access Management event detected (DeleteGroup)
[AWS-IAM] Identity and Access Management event detected (DeleteGroupPolicy)
[AWS-IAM] Identity and Access Management event detected (DeleteLoginProfile)
[AWS-IAM] Identity and Access Management event detected (DeleteOpenIDConnectProvider)
[AWS-IAM] Identity and Access Management event detected (DeleteRolePermissionsBoundary)
[AWS-IAM] Identity and Access Management event detected (DeleteSAMLProvider)
[AWS-IAM] Identity and Access Management event detected (DeleteServerCertificate)
[AWS-IAM] Identity and Access Management event detected (DeleteServiceLinkedRole)
[AWS-IAM] Identity and Access Management event detected (DeleteServiceSpecificCredential)
[AWS-IAM] Identity and Access Management event detected (DeleteSigningCertificate)