mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
timewindow
This commit is contained in:
@@ -3,7 +3,7 @@ tests:
|
||||
- name: AWS Lambda UpdateFunctionCode
|
||||
file: cloud/aws_lambda_updatefunctioncode.yml
|
||||
pass_condition: '| stats count | where count > 0'
|
||||
earliest_time: '-7d'
|
||||
earliest_time: '-30d'
|
||||
latest_time: 'now'
|
||||
attack_data:
|
||||
- file_name: aws_cloudtrail_events.json
|
||||
|
||||
Reference in New Issue
Block a user