security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update aws_elasticache_security_group_modified_or_deleted.yml

Browse Source
This commit is contained in:
Austin Songer
2021-07-24 09:35:05 -05:00
committed by GitHub
parent 8816cb3345
commit 55a2af475b
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml
+3 -3
View File
@@ -16,11 +16,11 @@ detection:
selection_eventname2:
- eventName: "Authorize Cache Security Group Ingress"
selection_eventname3:
- eventName: "Revoke Cache Security Group Ingress"
- eventName: "Revoke Cache Security Group Ingress"
selection_eventname4:
- eventName: "AuthorizeCacheSecurityGroupEgress"
- eventName: "AuthorizeCacheSecurityGroupEgress"
selection_eventname5:
- eventName: "RevokeCacheSecurityGroupEgress"
- eventName: "RevokeCacheSecurityGroupEgress"
condition: selection_source and selection_eventname1 or selection_eventname2 or selection_eventname3 or selection_eventname4 or selection_eventname5
level: low
tags: