Update rules/cross-platform/execution_aws_ec2_lolbin_via_ssm.toml

terrancedejesus · imays11 · web-flow · commit af0fda077f54 · 2025-12-04T14:47:39.000-05:00
Co-authored-by: Isai &lt;59296946+imays11@users.noreply.github.com&gt;
diff --git a/rules/cross-platform/execution_aws_ec2_lolbin_via_ssm.toml b/rules/cross-platform/execution_aws_ec2_lolbin_via_ssm.toml
@@ -87,6 +87,8 @@ tags = [
     "Data Source: AWS",
     "Data Source: Amazon Web Services",
     "Data Source: AWS CloudTrail",
+    "Data Source: AWS EC2",
+    "Data Source: AWS SSM",
     "Data Source: Elastic Defend",
     "Resources: Investigation Guide",
 ]

Original file line number	Diff line number	Diff line change
`@@ -87,6 +87,8 @@ tags = [`
`87`	`87`	`"Data Source: AWS",`
`88`	`88`	`"Data Source: Amazon Web Services",`
`89`	`89`	`"Data Source: AWS CloudTrail",`
	`90`	`+ "Data Source: AWS EC2",`
	`91`	`+ "Data Source: AWS SSM",`
`90`	`92`	`"Data Source: Elastic Defend",`
`91`	`93`	`"Resources: Investigation Guide",`
`92`	`94`	`]`