Update aws_enum_listing.yml

2020-11-22 00:50:34 +08:00
parent 00504ee186
commit e764ca687a
1 changed files with 1 additions and 1 deletions
@@ -10,7 +10,7 @@ detection:
    selection_eventname:
        - eventName: list*
    timeframe: 10m
-    condition: count() > 50 by userIdentity.arn 
+    condition: count() by userIdentity.arn > 50  

 falsepositives:
    - AWS Config or other configuration scanning activities