SEKOIA.IO Rules medium stable sigma

AWS CloudTrail Route 53 Domain Transfer Lock Disabled

Detects when the transfer lock feature is disabled on a domain name handled by AWS Route 53 service.

View Source

Detection Logic

selection:
  sekoiaio.intake.dialect_uuid: d3a813ac-f9b5-451c-a602-a5994544d9ed
  event.provider: route53domains.amazonaws.com
  event.action: DisableDomainTransferLock
condition: selection

Field Validations

Loading…

Comments (0)

Loading comments...