Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

enable new rules #517

Merged
merged 1 commit into from
Sep 27, 2022
Merged

enable new rules #517

merged 1 commit into from
Sep 27, 2022

Conversation

calkim-panther
Copy link
Contributor

Background

Enabled rules from sigma high detections

Changes

enabled rules

Testing

n/a

@calkim-panther calkim-panther requested review from a team September 27, 2022 16:23
edyesed
edyesed approved these changes Sep 27, 2022
View reviewed changes
Copy link
Contributor

@edyesed edyesed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

enables the new AWS detections for:

  • EC2 startup script getting modified ( user_data )
  • IPSet getting modified on WAF
  • RDS Instance Snapshot is restored and has a public IP attached to it
  • SecurityHub Findings or Insights are updated or deleted

@calkim-panther calkim-panther merged commit 32e2699 into master Sep 27, 2022
@calkim-panther calkim-panther deleted the calkim-aws-update-sevs branch September 27, 2022 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@edyesed edyesed edyesed approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@calkim-panther @edyesed