Skip to content

Commit 128fb1e

Browse files
committed
fix sigma rule syntax issues
1 parent 9382521 commit 128fb1e

1 file changed

Lines changed: 1 addition & 2 deletions

File tree

rules/cloud/aws/cloudtrail/aws_sts_getcalleridentity_trufflehog.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@ references:
88
- https://github.com/trufflesecurity/trufflehog
99
author: Adan Alvarez @adanalvarez
1010
date: 2025-10-12
11-
modified: 2025-10-12
1211
tags:
1312
- attack.discovery
1413
- attack.t1087.004
@@ -23,4 +22,4 @@ detection:
2322
condition: selection
2423
falsepositives:
2524
- Legitimate internal security scanning or key validation that intentionally uses TruffleHog. Authorize and filter known scanner roles, IP ranges, or assumed roles as needed.
26-
level: medium
25+
level: low

0 commit comments

Comments
 (0)