added BBR tag

terrancedejesus · terrancedejesus · commit 01bb9e7bf65b · 2024-11-05T13:03:04.000-05:00
diff --git a/rules/integrations/aws/persistence_ec2_instance_request_to_iam_service.toml b/rules/integrations/aws/persistence_ec2_instance_request_to_iam_service.toml
@@ -34,6 +34,7 @@ tags = [
     "Use Case: Identity and Access Audit",
     "Tactic: Privilege Escalation",
     "Tactic: Persistence",
+    "Rule Type: BBR",
 ]
 timestamp_override = "event.ingested"
 type = "eql"

Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,7 @@ tags = [`
`34`	`34`	`"Use Case: Identity and Access Audit",`
`35`	`35`	`"Tactic: Privilege Escalation",`
`36`	`36`	`"Tactic: Persistence",`
	`37`	`+ "Rule Type: BBR",`
`37`	`38`	`]`
`38`	`39`	`timestamp_override = "event.ingested"`
`39`	`40`	`type = "eql"`