mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
First commit, touch file 1
This commit is contained in:
@@ -2,7 +2,7 @@ name: Abnormally High AWS Instances Launched by User - MLTK
|
||||
id: dec41ad5-d579-42cb-b4c6-f5dbb778bbe5
|
||||
version: 2
|
||||
date: '2020-07-21'
|
||||
author: Jason Brewer, Splunk
|
||||
author: Jason Brewer, Splunk
|
||||
type: Anomaly
|
||||
datamodel: []
|
||||
description: This search looks for AWS CloudTrail events where a user successfully
|
||||
|
||||
Reference in New Issue
Block a user