Techniques
Sample rules
AWS SecurityHub Findings Evasion
- source: sigma
- technicques:
- t1562
Description
Detects the modification of the findings on SecurityHub.
Detection logic
condition: selection
selection:
eventName:
- BatchUpdateFindings
- DeleteInsight
- UpdateFindings
- UpdateInsight
eventSource: securityhub.amazonaws.com