Update aws.defense-evasion.dns-delete-logs.md with current CloudTrail…

… event name (#515) * Update aws.defense-evasion.dns-delete-logs.md Corrected the AWS CloudTrail Event name for detection * autogen docs --------- Co-authored-by: Christophe Tafani-Dereeper <[email protected]>
DataDog · May 1, 2024 · c9e7ae3 · c9e7ae3
1 parent ce6c296
commit c9e7ae3
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/docs/attack-techniques/AWS/aws.defense-evasion.dns-delete-logs.md b/docs/attack-techniques/AWS/aws.defense-evasion.dns-delete-logs.md
@@ -25,7 +25,7 @@ Deletes a Route53 DNS Resolver query logging configuration. Simulates an attacke
 
 <span style="font-variant: small-caps;">Detonation</span>:
 
-- Delete the DNS logging configuration using <code>route53:DeleteQueryLoggingConfig</code>.
+- Delete the DNS logging configuration using <code>route53:DeleteResolverQueryLogConfig</code>.
 
 ## Instructions
 
@@ -35,6 +35,6 @@ stratus detonate aws.defense-evasion.dns-delete-logs
 ## Detection
 
 
-Identify when a DNS logging configuration is deleted, through CloudTrail's <code>DeleteQueryLoggingConfig</code> event.
+Identify when a DNS logging configuration is deleted, through CloudTrail's <code>DeleteResolverQueryLogConfig</code> event.
 
 
diff --git a/v2/internal/attacktechniques/aws/defense-evasion/dns-delete-logs/main.go b/v2/internal/attacktechniques/aws/defense-evasion/dns-delete-logs/main.go
@@ -29,9 +29,9 @@ Warm-up:
 
 Detonation:
 
-- Delete the DNS logging configuration using <code>route53:DeleteQueryLoggingConfig</code>.`,
+- Delete the DNS logging configuration using <code>route53:DeleteResolverQueryLogConfig</code>.`,
 		Detection: `
-Identify when a DNS logging configuration is deleted, through CloudTrail's <code>DeleteQueryLoggingConfig</code> event.
+Identify when a DNS logging configuration is deleted, through CloudTrail's <code>DeleteResolverQueryLogConfig</code> event.
 `,
 		IsIdempotent:               false, // can't delete a DNS logging configuration twice
 		PrerequisitesTerraformCode: tf,