Repository navigation

Add AWS CloudTrail behavioral detections - #4297

Open

themaryjo wants to merge 20 commits into

aws-cloudtrail-behavioral-detections

Open

Add AWS CloudTrail behavioral detections#4297
themaryjo wants to merge 20 commits into
developfrom
aws-cloudtrail-behavioral-detections

Commits on Sep 22, 2026
- Add repeated CloudWatch Logs read operations detection
  themaryjo
  committed
  50bd65f
Commits on Sep 24, 2026
- Add repeated CloudWatch Logs read operations detection
  themaryjo
  committed
  b96f672
Commits on Sep 29, 2026
- Add AWS CloudTrail behavioral detections
  themaryjo
  committed
  b2a63bd
- Update AWS EC2 Instance Connect key upload detection
  themaryjo
  committed
  5e95a84
Commits on Sep 30, 2026
Commits on Oct 2, 2026
- Use CIM fields in AWS EC2 key upload detection
  themaryjo
  committed
  24f86e2
Commits on Oct 8, 2026
- Delete detections/cloud/aws_ec2_multiple_ssh_public_keys_uploaded_by_a_single_identity.yml
  themaryjo
  authored
  f98ef83
Commits on Oct 9, 2026
- modification of secrets manager detection
  themaryjo
  authored
  da1dd0f
- Update aws_repeated_cloudwatch_logs_read_operations.yml
  themaryjo
  authored
  a87e87d
Commits on Oct 14, 2026
- Remove duplicate CloudWatch Logs detection from behavioral PR
  themaryjo
  committed
  67bfd5d
- Merge remote-tracking branch 'origin/develop' into aws-cloudtrail-behavioral-detections
  themaryjo
  committed
  da76304
Commits on Oct 15, 2026
Commits on Oct 16, 2026
- Update aws_anomalous_secrets_manager_batch_retrieval.yml
  themaryjo
  authored
  a21b74f
- Merge branch 'develop' into aws-cloudtrail-behavioral-detections
  themaryjo
  authored
  d3e1d14