diff --git a/public/pages/Detectors/components/DetectorRulesView/__snapshots__/DetectorRulesView.test.tsx.snap b/public/pages/Detectors/components/DetectorRulesView/__snapshots__/DetectorRulesView.test.tsx.snap
index 7ef9d7164..ab99033a3 100644
--- a/public/pages/Detectors/components/DetectorRulesView/__snapshots__/DetectorRulesView.test.tsx.snap
+++ b/public/pages/Detectors/components/DetectorRulesView/__snapshots__/DetectorRulesView.test.tsx.snap
@@ -470,6 +470,10 @@ exports[`<DetectorRulesView /> spec renders the component 1`] = `
                           "name": "Azure",
                           "value": "azure",
                         },
+                        Object {
+                          "name": "VPC Flow",
+                          "value": "vpcflow",
+                        },
                       ],
                       "type": "field_value_selection",
                     },
@@ -632,6 +636,10 @@ exports[`<DetectorRulesView /> spec renders the component 1`] = `
                             "name": "Azure",
                             "value": "azure",
                           },
+                          Object {
+                            "name": "VPC Flow",
+                            "value": "vpcflow",
+                          },
                         ],
                         "type": "field_value_selection",
                       },
@@ -866,6 +874,10 @@ exports[`<DetectorRulesView /> spec renders the component 1`] = `
                                       "name": "Azure",
                                       "value": "azure",
                                     },
+                                    Object {
+                                      "name": "VPC Flow",
+                                      "value": "vpcflow",
+                                    },
                                   ],
                                   "type": "field_value_selection",
                                 },
@@ -1022,6 +1034,10 @@ exports[`<DetectorRulesView /> spec renders the component 1`] = `
                                           "name": "Azure",
                                           "value": "azure",
                                         },
+                                        Object {
+                                          "name": "VPC Flow",
+                                          "value": "vpcflow",
+                                        },
                                       ],
                                       "type": "field_value_selection",
                                     }
diff --git a/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap b/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap
index 94f391386..53cd0b7e0 100644
--- a/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap
+++ b/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap
@@ -3025,6 +3025,10 @@ exports[`<DetectorDetails /> spec renders the component 1`] = `
                               "name": "Azure",
                               "value": "azure",
                             },
+                            Object {
+                              "name": "VPC Flow",
+                              "value": "vpcflow",
+                            },
                           ],
                           "type": "field_value_selection",
                         },
@@ -3187,6 +3191,10 @@ exports[`<DetectorDetails /> spec renders the component 1`] = `
                                 "name": "Azure",
                                 "value": "azure",
                               },
+                              Object {
+                                "name": "VPC Flow",
+                                "value": "vpcflow",
+                              },
                             ],
                             "type": "field_value_selection",
                           },
@@ -3421,6 +3429,10 @@ exports[`<DetectorDetails /> spec renders the component 1`] = `
                                           "name": "Azure",
                                           "value": "azure",
                                         },
+                                        Object {
+                                          "name": "VPC Flow",
+                                          "value": "vpcflow",
+                                        },
                                       ],
                                       "type": "field_value_selection",
                                     },
@@ -3577,6 +3589,10 @@ exports[`<DetectorDetails /> spec renders the component 1`] = `
                                               "name": "Azure",
                                               "value": "azure",
                                             },
+                                            Object {
+                                              "name": "VPC Flow",
+                                              "value": "vpcflow",
+                                            },
                                           ],
                                           "type": "field_value_selection",
                                         }
diff --git a/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap b/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap
index c9062d0ba..e99cae913 100644
--- a/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap
+++ b/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap
@@ -1849,6 +1849,10 @@ exports[`<DetectorDetailsView /> spec renders the component 1`] = `
                             "name": "Azure",
                             "value": "azure",
                           },
+                          Object {
+                            "name": "VPC Flow",
+                            "value": "vpcflow",
+                          },
                         ],
                         "type": "field_value_selection",
                       },
@@ -2011,6 +2015,10 @@ exports[`<DetectorDetailsView /> spec renders the component 1`] = `
                               "name": "Azure",
                               "value": "azure",
                             },
+                            Object {
+                              "name": "VPC Flow",
+                              "value": "vpcflow",
+                            },
                           ],
                           "type": "field_value_selection",
                         },
@@ -2245,6 +2253,10 @@ exports[`<DetectorDetailsView /> spec renders the component 1`] = `
                                         "name": "Azure",
                                         "value": "azure",
                                       },
+                                      Object {
+                                        "name": "VPC Flow",
+                                        "value": "vpcflow",
+                                      },
                                     ],
                                     "type": "field_value_selection",
                                   },
@@ -2401,6 +2413,10 @@ exports[`<DetectorDetailsView /> spec renders the component 1`] = `
                                             "name": "Azure",
                                             "value": "azure",
                                           },
+                                          Object {
+                                            "name": "VPC Flow",
+                                            "value": "vpcflow",
+                                          },
                                         ],
                                         "type": "field_value_selection",
                                       }
diff --git a/public/pages/Detectors/utils/constants.ts b/public/pages/Detectors/utils/constants.ts
index 21208828c..4766b17d2 100644
--- a/public/pages/Detectors/utils/constants.ts
+++ b/public/pages/Detectors/utils/constants.ts
@@ -40,4 +40,5 @@ export const DETECTOR_TYPES = {
   M365: { id: 'm365', label: 'Microsoft 365 logs', abbr: 'MSO' },
   OKTA: { id: 'okta', label: 'Okta events', abbr: 'OKT' },
   AZURE: { id: 'azure', label: 'Azure logs', abbr: 'AZR' },
+  VPC_FLOW: { id: 'vpcflow', label: 'VPC Flow logs', abbr: 'VPC' },
 };
diff --git a/public/pages/Rules/utils/constants.ts b/public/pages/Rules/utils/constants.ts
index 8e9dc70a9..5d75c6ab1 100644
--- a/public/pages/Rules/utils/constants.ts
+++ b/public/pages/Rules/utils/constants.ts
@@ -19,6 +19,7 @@ export const ruleTypes: { label: string; value: string; abbr: string }[] = [
   { abbr: 'MSO', label: 'Microsoft 365', value: 'm365' },
   { abbr: 'OKT', label: 'Okta', value: 'okta' },
   { abbr: 'AZR', label: 'Azure', value: 'azure' },
+  { abbr: 'VPC', label: 'VPC Flow', value: 'vpcflow' },
 ];
 
 const paletteColors = euiPaletteForStatus(5);