Update elasticbeantalk-takeover-detection.yaml
parent
d38052f05a
commit
81fbbf0280
|
@ -25,17 +25,21 @@ dns:
|
||||||
class: inet
|
class: inet
|
||||||
recursion: true
|
recursion: true
|
||||||
retries: 3
|
retries: 3
|
||||||
|
|
||||||
matchers-condition: and
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
|
|
||||||
- type: regex
|
- type: regex
|
||||||
name: elasticbeanstalk
|
name: elasticbeanstalk
|
||||||
regex:
|
regex:
|
||||||
# Only CNAMEs with region specification are hijackable.
|
# Only CNAMEs with region specification are hijackable.
|
||||||
- \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
|
- \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
|
||||||
condition: or
|
condition: or
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "NXDOMAIN"
|
- "NXDOMAIN"
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: regex
|
- type: regex
|
||||||
group: 1
|
group: 1
|
||||||
|
|
Loading…
Reference in New Issue