diff --git a/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml b/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml index 3ce4ca2ab5..f8af7e0129 100644 --- a/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml +++ b/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml @@ -2,7 +2,7 @@ name: Abnormally High AWS Instances Launched by User - MLTK id: dec41ad5-d579-42cb-b4c6-f5dbb778bbe5 version: 2 date: '2020-07-21' -author: Jason Brewer, Splunk +author: Jason Brewer, Splunk type: Anomaly datamodel: [] description: This search looks for AWS CloudTrail events where a user successfully