TrailAlerts
TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events in AWS.
File Explorer
Download Latest Version (.zip)- deploy-rules.yml
- deploy-trailalerts.yml
- features.png
- TrailAlerts-Infra.PNG
- TrailAlerts-VPNAPI.PNG
- TrailAlerts.png
- sample_rules.json
- aws_cloudtrail_attachpolicy.yml
- aws_cloudtrail_attachpolicy_tests.json
- aws_cloudtrail_create_iam.yml
- aws_cloudtrail_create_iam_tests.json
- aws_cloudtrail_disable_logging.yml
- aws_cloudtrail_disable_logging_tests.json
- aws_cloudtrail_new_acl_entries.yml
- aws_cloudtrail_new_acl_entries_tests.json
- aws_cloudtrail_new_route_added.yml
- aws_cloudtrail_new_route_added_tests.json
- aws_cloudtrail_puteventselectors.yml
- aws_cloudtrail_puteventselectors_tests.json
- aws_cloudtrail_security_group_change_ingress_egress.yml
- aws_cloudtrail_security_group_change_ingress_egress_tests.json
- aws_cloudtrail_security_group_change_loadbalancer.yml
- aws_cloudtrail_security_group_change_loadbalancer_tests.json
- aws_cloudtrail_security_group_change_rds.yml
- aws_cloudtrail_security_group_change_rds_tests.json
- aws_cloudtrail_ssm_malicious_usage.yml
- aws_cloudtrail_ssm_malicious_usage_tests.json
- aws_config_disable_recording.yml
- aws_config_disable_recording_tests.json
- aws_console_getsignintoken.yml
- aws_console_getsignintoken_tests.json
- aws_delete_identity.yml
- aws_delete_identity_tests.json
- aws_delete_saml_provider.yml
- aws_delete_saml_provider_tests.json
- aws_disable_bucket_versioning.yml
- aws_disable_bucket_versioning_tests.json
- aws_ec2_deleteflowlogs.yml
- aws_ec2_deleteflowlogs_tests.json
- aws_ec2_disable_encryption.yml
- aws_ec2_disable_encryption_tests.json
- aws_ec2_getpassworddate.yml
- aws_ec2_getpassworddate_tests.json
- aws_ec2_import_key_pair_activity.yml
- aws_ec2_import_key_pair_activity_tests.json
- aws_ec2_startup_script_change.yml
- aws_ec2_startup_script_change_tests.json
- aws_efs_fileshare_modified_or_deleted.yml
- aws_efs_fileshare_modified_or_deleted_tests.json
- aws_efs_fileshare_mount_modified_or_deleted.yml
- aws_efs_fileshare_mount_modified_or_deleted_tests.json
- aws_eks_cluster_created_or_deleted.yml
- aws_eks_cluster_created_or_deleted_tests.json
- aws_elasticache_security_group_created.yml
- aws_elasticache_security_group_created_tests.json
- aws_elasticache_security_group_modified_or_deleted.yml
- aws_elasticache_security_group_modified_or_deleted_tests.json
- aws_enum_buckets.yml
- aws_enum_buckets_tests.json
- aws_guardduty_disruption.yml
- aws_guardduty_disruption_tests.json
- aws_iam_backdoor_users_keys.yml
- aws_iam_backdoor_users_keys_tests.json
- aws_iam_s3browser_loginprofile_creation.yml
- aws_iam_s3browser_loginprofile_creation_tests.json
- aws_iam_s3browser_user_or_accesskey_creation.yml
- aws_iam_s3browser_user_or_accesskey_creation_tests.json
- aws_lambda_function_url.yml
- aws_lambda_function_url_tests.json
- aws_new_lambda_layer_attached.yml
- aws_new_lambda_layer_attached_tests.json
- aws_organizations_leaveorganization.yml
- aws_organizations_leaveorganization_tests.json
- aws_passed_role_to_glue_development_endpoint.yml
- aws_passed_role_to_glue_development_endpoint_tests.json
- aws_rds_change_master_password.yml
- aws_rds_change_master_password_tests.json
- aws_rds_dbcluster_actions.yml
- aws_rds_dbcluster_actions_tests.json
- aws_rds_public_db_restore.yml
- aws_rds_public_db_restore_tests.json
- aws_root_account_usage.yml
- aws_root_account_usage_tests.json
- aws_route53resolver_deleteresolver.yml
- aws_route53resolver_deleteresolver_tests.json
- aws_route_53_domain_transferred_lock_disabled.yml
- aws_route_53_domain_transferred_lock_disabled_tests.json
- aws_route_53_domain_transferred_to_another_account.yml
- aws_route_53_domain_transferred_to_another_account_tests.json
- aws_s3_data_management_tampering.yml
- aws_s3_data_management_tampering_tests.json
- aws_s3_lifecycle.yml
- aws_s3_lifecycle_tests.json
- aws_secretsmanager_batchgetsecretvalue.yml
- aws_secretsmanager_batchgetsecretvalue_tests.json
- aws_secretsmanager_getsecrets.yml
- aws_secretsmanager_getsecrets_tests.json
- aws_securityhub_finding_evasion.yml
- aws_securityhub_finding_evasion_tests.json
- aws_snapshot_backup_exfiltration.yml
- aws_snapshot_backup_exfiltration_tests.json
- aws_ssm_ssmgetparameter.yml
- aws_ssm_ssmgetparameter_tests.json
- aws_sso_idp_change.yml
- aws_sso_idp_change_tests.json
- aws_sts_getsessiontoken_misuse.yml
- aws_sts_getsessiontoken_misuse_tests.json
- aws_susp_saml_activity.yml
- aws_susp_saml_activity_tests.json
- aws_update_login_profile.yml
- aws_update_login_profile_tests.json
- exceptions.json
- main.tf
- migrate.tf
- terraform.tfvars.json
- variables.tf
- generate_rule_example.py
- github_oidc.tf
- .gitignore
- LICENSE
- README.md
// repository documentation
Was this content helpful?
(0 ratings)