Sagan informational stable other

[AWS] RDS Describe DB Snapshots

[AWS] RDS Describe DB Snapshots

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[AWS] RDS Describe DB Snapshots"; program:rds.amazonaws.com; json_content:".eventName","DescribeDBSnapshots"; parse_src_ip:1; normalize; classtype:system-event; sid:5017153; rev:1; metadata: createdOn 2025_05_09, updatedOn 2025_07_30;)

Field Validations

Loading…

Comments (0)

Loading comments...