security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Minor change, filter param should not be a list

Browse Source
This commit is contained in:
Darin Smith
2022-06-08 06:58:19 -07:00
parent 61df0b9218
commit 04bcbcdb44
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/cloud/aws/aws_ecs_task_definition_backdoor.yml
+3 -3
View File
@@ -19,9 +19,9 @@ detection:
- RegisterTaskDefinition
- RunTask
filter:
- requestParameters.containerDefinitions.command|contains|all:
- '169.254'
- '$AWS_CONTAINER_CREDENTIALS'
requestParameters.containerDefinitions.command|contains|all:
- '169.254'
- '$AWS_CONTAINER_CREDENTIALS'
condition: selection_source and filter
level: medium
tags: