From e4df77dab3393239051ff48bf4f11047bdc90db3 Mon Sep 17 00:00:00 2001 From: Shashank K S Date: Wed, 10 Sep 2025 21:53:50 +0530 Subject: [PATCH] Fix updated_date for tunings as part of #5079 --- ...escalation_iam_customer_managed_policy_attached_to_role.toml | 2 +- .../aws/privilege_escalation_iam_update_assume_role_policy.toml | 2 +- .../azure/credential_access_entra_id_brute_force_activity.toml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml b/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml index 090883ce90e..8b683e761d8 100644 --- a/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml +++ b/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml @@ -2,7 +2,7 @@ creation_date = "2024/11/04" integration = ["aws"] maturity = "production" -updated_date = "2025/10/10" +updated_date = "2025/09/10" [rule] author = ["Elastic"] diff --git a/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml b/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml index 5897f2cf985..759d94bea8e 100644 --- a/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml +++ b/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml @@ -2,7 +2,7 @@ creation_date = "2020/07/06" integration = ["aws"] maturity = "production" -updated_date = "2025/10/10" +updated_date = "2025/09/10" [rule] author = ["Elastic"] diff --git a/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml b/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml index f0923edd399..d5b3024e350 100644 --- a/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml +++ b/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml @@ -2,7 +2,7 @@ creation_date = "2024/09/06" integration = ["azure"] maturity = "production" -updated_date = "2025/10/10" +updated_date = "2025/09/10" [rule] author = ["Elastic"]