Files
blue-team-tools/rules/cloud
Rachel Rice db58345bc6 Update selection_source for AWS ec2 startup script rule
The JSON payload for `ModifyInstanceAttribute` event currently looks like:
```
"requestParameters": {
  "attribute": "userData",
  ...
},
```

Updating the selection_source from `requestParameters.userData: "*"` to `requestParameters.attribute: "userData"` accordingly.

Signed-off-by: Rachel Rice <rachel.rice@lacework.net>
2022-06-07 13:20:08 +01:00
..
2022-06-02 13:37:00 -07:00
2022-03-05 12:39:04 +01:00