Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

THREAT-425 Stratus AWS Lambda Detections #1486

Merged
merged 6 commits into from
Jan 30, 2025
Merged

THREAT-425 Stratus AWS Lambda Detections #1486

merged 6 commits into from
Jan 30, 2025

Conversation

akozlovets098
Copy link
Contributor

Changes

  • added AWS.Lambda.UpdateFunctionConfiguration, AWS.Potential.Backdoor.Lambda and AWS.Lambda.UpdateFunctionCode rules

Testing

pat test

@akozlovets098 akozlovets098 requested a review from a team as a code owner January 22, 2025 13:55
@arielkr256 arielkr256 added the rules Real-time log data detections label Jan 24, 2025
@akozlovets098 akozlovets098 added bug Something isn't working and removed rules Real-time log data detections labels Jan 27, 2025
@arielkr256 arielkr256 added rules Real-time log data detections and removed bug Something isn't working labels Jan 27, 2025
arielkr256
arielkr256 approved these changes Jan 27, 2025
View reviewed changes
Copy link
Contributor

@arielkr256 arielkr256 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

UDM default values are not needed, but otherwise these look great!

rules/aws_cloudtrail_rules/aws_add_malicious_lambda_extension.py Outdated Show resolved Hide resolved
rules/aws_cloudtrail_rules/aws_backdoor_lambda_function.py Outdated Show resolved Hide resolved
rules/aws_cloudtrail_rules/aws_overwrite_lambda_code.py Outdated Show resolved Hide resolved
@arielkr256 arielkr256 enabled auto-merge January 30, 2025 15:50
@arielkr256 arielkr256 added this pull request to the merge queue Jan 30, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to no response for status checks Jan 30, 2025
@arielkr256 arielkr256 added this pull request to the merge queue Jan 30, 2025
@arielkr256 arielkr256 removed this pull request from the merge queue due to a manual request Jan 30, 2025
@arielkr256 arielkr256 added this pull request to the merge queue Jan 30, 2025
Merged via the queue into develop with commit 2fdb6b6 Jan 30, 2025
6 checks passed
@arielkr256 arielkr256 deleted the THREAT-425-Stratus-AWS-Lambda-Detections branch January 30, 2025 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@arielkr256 arielkr256 arielkr256 approved these changes

Assignees
No one assigned
Labels
rules Real-time log data detections
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@akozlovets098 @arielkr256