[New Rule] AWS RDS Snapshot Deleted - Githubissues

elastic / detection-rules

https://www.elastic.co/guide/en/security/current/detection-engine-overview.html

Other

1.91k stars 492 forks source link

[New Rule] AWS RDS Snapshot Deleted #3852

Closed imays11 closed 3 months ago

imays11 commented 3 months ago

Issues

https://github.com/elastic/ia-trade-team/issues/346
Summary

Identifies the deletion of an AWS RDS DB snapshot. Snapshots contain a full backup of an entire DB instance. Unauthorized deletion of snapshots can make it impossible to recover critical or sensitive data.

Screenshot 2024-06-28 at 11 34 11 PM