Files
splunk-security_content/macros/securityGroupAPIs.json
T
David Dorsey 3d25c40bf7 Updated macro definition in detections, investigations, and baselines to just be a list
Broke out macros definition into it's own manifest
Created macro manifests for all of current macros that we ship
Created lookup file manifest
Created lookup file manifests for all current lookup files that we ship
2019-09-30 13:53:25 -07:00

6 lines
559 B
JSON

{
"definition": "(eventName=AuthorizeSecurityGroupIngress OR eventName=CreateSecurityGroup OR eventName=DeleteSecurityGroup OR eventName=DescribeClusterSecurityGroups OR eventName=DescribeDBSecurityGroups OR eventName=DescribeSecurityGroupReferences OR eventName=DescribeSecurityGroups OR eventName=DescribeStaleSecurityGroups OR eventName=RevokeSecurityGroupIngress OR eventName=UpdateSecurityGroupRuleDescriptionsIngress)",
"description": "This macro is a list of AWS event names associated with security groups",
"name": "securityGroupAPIs"
}