heroui logo

Wiz Update Support Contact List

Panther Rules

View Source
Summary
The rule 'Wiz Update Support Contact List' is designed to monitor and detect updates made to the support contact list within the Wiz environment. It specifically identifies actions that modify the list of support contacts, aiming to ensure that such changes are controlled and authorized. If an unauthorized update occurs, the rule triggers a response indicating that the change should be verified, and if it is found to be unsanctioned, appropriate rollback actions should be implemented along with measures to prevent recurrence. The rule conducts checks based on defined test scenarios that confirm legitimate updates or detect unauthorized user-related activities, maintaining a governance framework around contact management in Wiz.
Categories
  • Cloud
  • AWS
  • Identity Management
Data Sources
  • User Account
  • Application Log
  • Cloud Service
ATT&CK Techniques
  • T1636.003
Created: 2024-09-16