Sigma AWS Cloudtrail Detection rules
A collection of rules based on the Sigma rules for AWS based on the Filebeat AWS module and Elastic agent integration.
The search results are evaluated by ElasticPress using Elasticsearch clusters from Elastic Cloud.