AWS.CloudTrail.EventSelectorsDisabled: improved description

panther-labs · Dec 5, 2024 · 50ebb38 · 50ebb38
1 parent 92f7e39
commit 50ebb38
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/aws_cloudtrail_rules/aws_cloudtrail_event_selectors_disabled.yml b/rules/aws_cloudtrail_rules/aws_cloudtrail_event_selectors_disabled.yml
@@ -16,7 +16,7 @@ Reports:
     - TA0005:T1562
 Severity: Medium
 Description: >
-  A CloudTrail Trail was modified.
+  A CloudTrail Trail was modified to exclude management events for 1 or more resource types.
 Runbook: https://docs.runpanther.io/alert-runbooks/built-in-rules/aws-cloudtrail-modified
 Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-update-a-trail-console.html
 SummaryAttributes: