New Network Route Added

Rule Info

Name
New Network Route Added
Author
jamesc-grafana
Description
Detects the addition of a new network route to a route table in AWS.
Reference
https://www.gorillastack.com/blog/real-time-events/important-aws-cloudtrail-security-events-tracking/
Date
2024-07-11 00:00:00
Modified
None
Id
c803b2ce-c4a2-4836-beae-b112010390b1
Tags
attack.initial-access attack.t1190 DEMO
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=c803b2ce-c4a2-4836-beae-b112010390b1

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
598d29f81
James C
Merge PR #4900 from @jamesc-grafana - Add new AWS cloudtrail rules
2024-07-11
f95d5397b
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022