security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule tuning] fix name for GCP Kubernetes Rolebindings Created or Patched (#1661)

Browse Source 
(cherry picked from commit 9a60d7a26a)
This commit is contained in:
Justin Ibarra
2021-12-13 08:59:56 -09:00
committed by github-actions[bot]
parent 634dafa8b9
commit c44d51675d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/gcp/privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml
+2 -2
View File
@@ -1,7 +1,7 @@
[metadata]
creation_date = "2021/06/06"
maturity = "production"
updated_date = "2021/10/14"
updated_date = "2021/12/13"
integration = "gcp"
[rule]
@@ -14,7 +14,7 @@ from = "now-20m"
index = ["filebeat-*", "logs-gcp*"]
language = "kuery"
license = "Elastic License v2"
name = "GCP Kubernetes Rolebindings Created or Patched "
name = "GCP Kubernetes Rolebindings Created or Patched"
note = """## Config
The GCP Fleet integration, Filebeat module, or similarly structured data is required to be compatible with this rule."""