AWS EFS Fileshare Mount Modified or Deleted — Detection Rule
Detects when a EFS Fileshare Mount is modified or deleted. An adversary breaking any file system using the mount target that is being deleted, which might disrupt instances or applications using those mounts.