Panther informational experimental python

AWS VPC Healthy Log Status

Checks for the log status `SKIPDATA`, which indicates that data was lost either to an internal server error or due to capacity constraints.

View Source

Detection Logic

from panther_aws_helpers import aws_rule_context


def rule(event):
    return event.udm("log_status") == "SKIPDATA"


def alert_context(event):
    return aws_rule_context(event)

Field Validations

Loading…

Comments (0)

Loading comments...