mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
9 lines
489 B
YAML
9 lines
489 B
YAML
name: network_acl_events
|
|
id: 3839921f-75c6-48df-b155-6a1d17e3b385
|
|
version: 1
|
|
creation_date: '2019-10-16'
|
|
modification_date: '2026-05-13'
|
|
author: Splunk Threat Research Team
|
|
description: This is a list of AWS event names that are associated with Network ACLs
|
|
definition: (eventName = CreateNetworkAcl OR eventName = CreateNetworkAclEntry OR eventName = DeleteNetworkAcl OR eventName = DeleteNetworkAclEntry OR eventName = ReplaceNetworkAclEntry OR eventName = ReplaceNetworkAclAssociation)
|