1200KM / tag
aws — logsource-product tag
48 related reference pages for logsource-product: aws.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- AWS CloudTrail Important Change · sigma-rule
- AWS Config Disabling Channel/Recorder · sigma-rule
- AWS Console GetSigninToken Potential Abuse · sigma-rule
- AWS ConsoleLogin Failed Authentication · sigma-rule
- AWS EC2 Disable EBS Encryption · sigma-rule
- AWS EC2 Startup Shell Script Change · sigma-rule
- AWS EC2 VM Export Failure · sigma-rule
- AWS ECS Task Definition That Queries The Credential Endpoint · sigma-rule
- AWS EFS Fileshare Mount Modified or Deleted · sigma-rule
- AWS EKS Cluster Created or Deleted · sigma-rule
- AWS ElastiCache Security Group Created · sigma-rule
- AWS ElastiCache Security Group Modified or Deleted · sigma-rule
- AWS GuardDuty Detector Deleted Or Updated · sigma-rule
- AWS GuardDuty Important Change · sigma-rule
- AWS IAM Backdoor Users Keys · sigma-rule
- AWS IAM S3Browser LoginProfile Creation · sigma-rule
- AWS IAM S3Browser Templated S3 Bucket Policy Creation · sigma-rule
- AWS IAM S3Browser User or AccessKey Creation · sigma-rule
- AWS Identity Center Identity Provider Change · sigma-rule
- AWS Key Pair Import Activity · sigma-rule
- AWS KMS Imported Key Material Usage · sigma-rule
- AWS RDS Master Password Change · sigma-rule
- AWS Root Credentials · sigma-rule
- AWS Route 53 Domain Transfer Lock Disabled · sigma-rule
- AWS Route 53 Domain Transferred to Another Account · sigma-rule
- AWS S3 Bucket Versioning Disable · sigma-rule
- AWS S3 Data Management Tampering · sigma-rule
- AWS SAML Provider Deletion Activity · sigma-rule
- AWS SecurityHub Findings Evasion · sigma-rule
- AWS Snapshot Backup Exfiltration · sigma-rule
- AWS STS AssumeRole Misuse · sigma-rule
- AWS STS GetCallerIdentity Enumeration Via TruffleHog · sigma-rule
- AWS STS GetSessionToken Misuse · sigma-rule
- AWS Successful Console Login Without MFA · sigma-rule
- AWS Suspicious SAML Activity · sigma-rule
- AWS User Login Profile Was Modified · sigma-rule
- Ingress/Egress Security Group Modification · sigma-rule
- LoadBalancer Security Group Modification · sigma-rule
- Malicious Usage Of IMDS Credentials Outside Of AWS Infrastructure · sigma-rule
- Modification or Deletion of an AWS RDS Cluster · sigma-rule
- New Network ACL Entry Added · sigma-rule
- New Network Route Added · sigma-rule
- Potential Bucket Enumeration on AWS · sigma-rule
- Potential Malicious Usage of CloudTrail System Manager · sigma-rule
- PUA - AWS TruffleHog Execution · sigma-rule
- RDS Database Security Group Modification · sigma-rule
- Restore Public AWS RDS Instance · sigma-rule
- SES Identity Has Been Deleted · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.