AWS - CloudTrail (v1.1.16)
Amazon Web Services CloudTrail.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Cloud Service Provider
Integrations (1)
- AWS - CloudTrail
Modeling rules (1)
- Amazon AWS CloudTrail Modeling Rule
Parsing rules (1)
- Amazon AWS CloudTrail Parsing Rule
README
<~XSIAM>
What does this pack do
The AWS CloudTrail pack contains the following:
- Integration for interacting with a trail on AWS via an automation (Playbooks, Playground, etc.). See the AWS - CloudTrail integration docs for additional details.
- Data normalization rules for parsing and modeling AWS CloudTrail Audit Logs that are ingested into the
amazon_aws_rawdataset via the Amazon S3 data source on Cortex XSIAM. See Ingest audit logs from AWS Cloud Trail for configuration details. When configuring the Amazon S3 data source on Cortex XSIAM, select the Audit Logs log type:
</~XSIAM>