security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule Tuning] AWS RDS Snapshot Export and AWS RDS Instance Created (#1514)

Browse Source
This commit is contained in:
Austin Songer
2021-10-04 16:31:31 -05:00
committed by GitHub
parent d5a8f41864
commit 0a3c44e8db
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/aws/exfiltration_rds_snapshot_export.toml
+2 -2
View File
@@ -1,11 +1,11 @@
[metadata]
creation_date = "2021/06/06"
maturity = "production"
updated_date = "2021/07/20"
updated_date = "2021/09/30"
integration = "aws"
[rule]
author = ["Elastic"]
author = ["Elastic", "Austin Songer"]
description = "Identifies the export of an Amazon Relational Database Service (RDS) Aurora database snapshot."
false_positives = [
"""
rules/integrations/aws/persistence_rds_instance_creation.toml
+2 -2
View File
@@ -1,11 +1,11 @@
[metadata]
creation_date = "2021/06/06"
maturity = "production"
updated_date = "2021/07/20"
updated_date = "2021/09/30"
integration = "aws"
[rule]
author = ["Elastic"]
author = ["Elastic", "Austin Songer"]
description = "Identifies the creation of an Amazon Relational Database Service (RDS) Aurora database instance."
false_positives = [
"""