AWS Network Access Control List Created With All Open Ports
The search looks for CloudTrail events to detect if any network ACLs were created with all the ports open to a specified CIDR.
This content is not mapped to any local saved search. Add mapping
AWS Network Access Control List Created With All Open Ports Help
You must install the AWS App for Splunk (version 5.1.0 or later) and Splunk Add-on for AWS, version 4.4.0 or later, and configure your CloudTrail inputs.
Open in Search