AWS VPC Flow Logs Deletion
Detects when AWS VPC Flow Logs are deleted. This action can be an attempt by an adversary to impair defenses by removing or modifying logging capabilities to avoid detection of their activities.
YARA-L

Detects when AWS VPC Flow Logs are deleted. This action can be an attempt by an adversary to impair defenses by removing or modifying logging capabilities to avoid detection of their activities.

Already have an account?