u-siem/usiem-aws

uSIEM parser for AWS events: VPC flow, GuardDuty, WAF, ELB, CloudTrail, CloudWatch...

RustMIT

usiem-aws

uSIEM parser for AWS events: VPC flow, GuardDuty, WAF, ELB, CloudTrail, CloudWatch...

Logs from https://medium.com/@george.fekkas/quick-and-dirty-cloudtrail-threat-hunting-log-analysis-b64af10ef923

Formato logs de CloudTrail: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference.html