From 5d4f144ab5889a540ea93a734dd5281f17c636b2 Mon Sep 17 00:00:00 2001 From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com> Date: Thu, 17 Feb 2022 15:10:25 -0800 Subject: [PATCH] First commit, touch file 1 --- .../abnormally_high_aws_instances_launched_by_user___mltk.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml b/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml index 3ce4ca2ab5..f8af7e0129 100644 --- a/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml +++ b/detections/deprecated/abnormally_high_aws_instances_launched_by_user___mltk.yml @@ -2,7 +2,7 @@ name: Abnormally High AWS Instances Launched by User - MLTK id: dec41ad5-d579-42cb-b4c6-f5dbb778bbe5 version: 2 date: '2020-07-21' -author: Jason Brewer, Splunk +author: Jason Brewer, Splunk type: Anomaly datamodel: [] description: This search looks for AWS CloudTrail events where a user successfully