bugfix p_any_ip_address -> p_any_ip_addresses (#518)

panther-labs · Sep 27, 2022 · 3f89216 · 3f89216
1 parent 32e2699
commit 3f89216
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 7 deletions.
diff --git a/rules/gcp_audit_rules/gcp_gcs_iam_changes.yml b/rules/gcp_audit_rules/gcp_gcs_iam_changes.yml
@@ -21,7 +21,7 @@ Description: >
 Runbook: Validate the GCS bucket change was safe.
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_gcs_public.yml b/rules/gcp_audit_rules/gcp_gcs_public.yml
@@ -18,7 +18,7 @@ Description: Adversaries may access data objects from improperly secured cloud s
 Runbook: Validate the GCS bucket change was safe.
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_iam_admin_role_assigned.yml b/rules/gcp_audit_rules/gcp_iam_admin_role_assigned.yml
@@ -17,7 +17,7 @@ Description: Attaching an audit role manually could be a sign of privilege escal
 Runbook: Verify with the user who attached the role or add to a allowlist
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_iam_corp_email.yml b/rules/gcp_audit_rules/gcp_iam_corp_email.yml
@@ -20,7 +20,7 @@ Description: A Gmail account is being used instead of a corporate email
 Runbook: Remove the user
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_iam_custom_role_changes.yml b/rules/gcp_audit_rules/gcp_iam_custom_role_changes.yml
@@ -20,7 +20,7 @@ Description: A custom role has been created, deleted, or updated.
 Runbook: No action needed, informational
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_sql_config_changes.yml b/rules/gcp_audit_rules/gcp_sql_config_changes.yml
@@ -18,7 +18,7 @@ Description: >
 Runbook: Validate the Sql Instance configuration change was safe
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -

diff --git a/rules/gcp_audit_rules/gcp_unused_regions.yml b/rules/gcp_audit_rules/gcp_unused_regions.yml
@@ -20,7 +20,7 @@ Description: >
 Runbook: Validate the user making the request and the resource created.
 SummaryAttributes:
   - severity
-  - p_any_ip_address
+  - p_any_ip_addresses
   - p_any_domain_names
 Tests:
   -