Anvilogic high experimental other

AWS Security Group Created [snowflake-awscloudtrail]

Detects when an AWS Security Group has been created. AWS security groups act as a virtual firewall for an instance to control inbound and outbound traffic.

View Source

Detection Logic

select * from awscloudtrail where event_time > dateadd(hour, -2, sysdate()) and event_name = 'CreateSecurityGroup'

Field Validations

Loading…

Comments (0)

Loading comments...