AWS CloudWatch Log Group Deletion
Detects when an AWS CloudWatch log group is deleted. This activity can be an indicator of an adversary attempting to impair defenses by removing or modifying logging capabilities to hide their actions.
YARA-L

Detects when an AWS CloudWatch log group is deleted. This activity can be an indicator of an adversary attempting to impair defenses by removing or modifying logging capabilities to hide their actions.

Already have an account?