Certified Security - Specialty

Sign Up Free or Log In to participate!

Filter logs for Root user activity

I didn’t understand this filter: "{ $.userIdentity.type = "Root" && $.userIdentity.invokedBy NOT EXISTS && $.eventType != "AwsServiceEvent" }". Can someone explain each part?

2 Answers

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?