Rule Info
Name
New Network ACL Entry Added
Author
jamesc-grafana
Description
Detects that network ACL entries have been added to a route table which could indicate that new attack vectors have been opened up in the AWS account.
Date
2024-07-11 00:00:00
Modified
None
Id
e1f7febb-7b94-4234-b5c6-00fb8500f5dd
Tags
attack.initial-access attack.t1190 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR