Files
blue-team-tools/rules
Rachel Rice db58345bc6 Update selection_source for AWS ec2 startup script rule
The JSON payload for `ModifyInstanceAttribute` event currently looks like:
```
"requestParameters": {
  "attribute": "userData",
  ...
},
```

Updating the selection_source from `requestParameters.userData: "*"` to `requestParameters.attribute: "userData"` accordingly.

Signed-off-by: Rachel Rice <rachel.rice@lacework.net>
2022-06-07 13:20:08 +01:00
..
2022-06-03 15:39:41 +02:00
2022-01-19 18:23:30 +01:00
2022-06-03 15:35:24 +02:00
2022-06-07 10:45:06 +02:00