Update known-malicious-software-versions.json

JupiterOne · Apr 19, 2024 · d5ee692 · d5ee692
1 parent f89c3b0
commit d5ee692
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rule-packs/known-malicious-software-versions.json b/rule-packs/known-malicious-software-versions.json
@@ -29,7 +29,7 @@
       "queries": [
         {
           "name": "query0",
-          "query": "FIND Internet THAT RELATES TO aws_security_group THAT RELATES TO aws_instance THAT HAS >> aws_instance_inventory WITH applicationInventory ~= 'xz-utils_5.6.0'",
+          "query": "FIND Internet THAT RELATES TO aws_security_group AS sg THAT RELATES TO aws_instance AS i THAT HAS >> aws_instance_inventory WITH applicationInventory ~= 'xz-utils_5.6.0' RETURN i.displayName AS 'EC2', sg.displayName AS 'Security Group'",
           "version": "v1"
         }
       ],
@@ -65,7 +65,7 @@
       "queries": [
         {
           "name": "query0",
-          "query": "FIND Internet THAT RELATES TO aws_security_group THAT RELATES TO aws_instance THAT HAS >> aws_instance_inventory WITH applicationInventory ~= 'xz-utils_5.6.1'",
+          "query": "FIND Internet THAT RELATES TO aws_security_group AS sg THAT RELATES TO aws_instance AS i THAT HAS >> aws_instance_inventory WITH applicationInventory ~= 'xz-utils_5.6.1' RETURN i.displayName AS 'EC2', sg.displayName AS 'Security Group'",
           "version": "v1"
         }
       ],