AWS GuardDuty Trusted Or Threat IP Lists Tampered
Detects when an AWS GuardDuty Detector's trusted IP lists or threat intelligence IP lists are deleted or disabled. This activity could indicate an adversary attempting to impair defensive capabilities to avoid detection.
YARA-L
