From 9481a7e4e285680a009a750ae91ba1c7811371a9 Mon Sep 17 00:00:00 2001
From: mikiodehartj1 <113941652+mikiodehartj1@users.noreply.github.com>
Date: Wed, 8 Nov 2023 13:43:35 -0700
Subject: [PATCH] adding directionals to ssh-keys-shared rule

---
 rule-packs/aws-threat.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rule-packs/aws-threat.json b/rule-packs/aws-threat.json
index a51d99f..a23d347 100644
--- a/rule-packs/aws-threat.json
+++ b/rule-packs/aws-threat.json
@@ -74,7 +74,7 @@
     "queries": [
       {
         "name": "query0",
-        "query": "Find aws_instance as i1 that uses Key \n  that uses aws_instance as i2 \nwhere i1.instanceId != i2.instanceId \nreturn \n  Key._type, Key.name, Key.tag.AccountName, \n  i1.instanceId, i1.region, i1.webLink, \n  i2.instanceId, i2.region, i2.webLink",
+        "query": "Find aws_instance as i1 that uses >> Key \n  that uses << aws_instance as i2 \nwhere i1.instanceId != i2.instanceId \nreturn \n  Key._type, Key.name, Key.tag.AccountName, \n  i1.instanceId, i1.region, i1.webLink, \n  i2.instanceId, i2.region, i2.webLink",
         "version": "v1"
       }
     ]