security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed index (#3770)

Browse Source 
(cherry picked from commit 13140d532c)
This commit is contained in:
Terrance DeJesus
2024-06-10 09:35:28 -04:00
committed by github-actions[bot]
parent 6fadd533fe
commit cee60a88af
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules_building_block/discovery_userdata_request_from_ec2_instance.toml
+2 -2
View File
@@ -4,7 +4,7 @@ integration = ["aws"]
maturity = "production"
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
min_stack_version = "8.9.0"
updated_date = "2024/04/14"
updated_date = "2024/06/10"
[rule]
author = ["Elastic"]
@@ -16,7 +16,7 @@ gather sensitive data from the instance or to identify potential vulnerabilities
does not generate an alert on its own, but serves as a signal for anomalous activity.
"""
from = "now-119m"
index = ["filebeat-*", "logs.aws.cloudtrail-*"]
index = ["filebeat-*", "logs-aws.cloudtrail-*"]
interval = "60m"
language = "kuery"
license = "Elastic License v2"