t1685.002 | LoFP

t1685.002

Title	Tags
automated deployment tools (e.g. terraform) managing guardduty state.	t1685 t1685.002 aws sigma
legitimate detector deletion by an admin (e.g., during account decommissioning).	t1685 t1685.002 aws sigma
temporary disablement for troubleshooting (verify via change management tickets).	t1685 t1685.002 aws sigma
valid change in a trail	t1685 t1685.002 aws sigma
valid change in aws config service	t1685 t1685.002 aws sigma