Products: Alibaba - ActionTrail
Rule ID | Rule Name |
---|---|
MATCH-S00600 | Alibaba ActionTrail Access Key Action Detected |
MATCH-S00601 | Alibaba ActionTrail IAM CreateUser Observed |
MATCH-S00594 | Alibaba ActionTrail KMS Activity |
MATCH-S00597 | Alibaba ActionTrail Key Deleted or Disabled |
MATCH-S00593 | Alibaba ActionTrail ListQueues |
MATCH-S00598 | Alibaba ActionTrail Logging Configuration Change Observed |
MATCH-S00589 | Alibaba ActionTrail Network Access Control List Deleted |
MATCH-S00599 | Alibaba ActionTrail Root Login |
MATCH-S00596 | Alibaba ActionTrail Secrets Manager Activity |
THRESHOLD-S00608 | Alibaba ActionTrail Unauthorized API Calls |
MATCH-S00685 | Authentication Without MFA |
Log Mapper ID | Log Mapper Name |
---|---|
8ce86919-71f7-4166-b3c5-21a7b1f17fb9 | Alibaba ActionTrail Catch All Mapping |
d7a7d607-8ed9-434d-9062-cfd6d6653c9c | Alibaba ActionTrail ConsoleSignin |