Rules Contributing to Suspicious AWS VPC Mirror Session Activity

The following rules are used to identify suspicious AWS VPC mirror session activity. Any one or more of these will trigger Suspicious AWS VPC Mirror Session Alert. Details for each rule can be viewed by clicking the More Details link in the description.

Title

Description

Update VPC Mirror created

A VPC mirror session has been created.

Update VPC Mirror deleted

A VPC mirror session has been deleted.