mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Patrick Bareiss
11 lines
757 B
YAML
11 lines
757 B
YAML
definition: (eventName=AssociateAddress OR eventName=AssociateIamInstanceProfile OR
|
|
eventName=AttachClassicLinkVpc OR eventName=AttachNetworkInterface OR eventName=AttachVolume
|
|
OR eventName=BundleInstance OR eventName=DetachClassicLinkVpc OR eventName=DetachVolume
|
|
OR eventName=GetConsoleOutput OR eventName=GetConsoleScreenshot OR eventName=ModifyInstanceAttribute
|
|
OR eventName=ModifyInstancePlacement OR eventName=MonitorInstances OR eventName=RebootInstances
|
|
OR eventName=ResetInstanceAttribute OR eventName=StartInstances OR eventName=StopInstances
|
|
OR eventName=TerminateInstances OR eventName=UnmonitorInstances)
|
|
description: This is a list of AWS event names that have to do with modifying Amazon
|
|
EC2 instances
|
|
name: ec2ModificationAPIs
|