Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Changes and attribution - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="what-changes-were-made-in-environment-sg-or-vpc-in-last-time-period">What changes were made in environment, SG or VPC in last time period {}?</h2> <p>Find all changes in the last 24 hours:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find * with _beginOn > date.now - 24 hours </pre> <p>Changes in the last 24 hours related to a particular VPC:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find * with _beginOn > date.now - 24 hours that relates to aws_vpc with vpcId='{vpcId}' or name='{vpcName}' </pre> <p>Resources with a certain tag that change in the last 24 hours:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find * with _beginOn > date.now - 24 hours and (tag.Environment = '{tagValue}' or tag.Project = '{tagValue}') </pre> <h2 data-id="which-developer-s-most-likely-introduced-vulnerabilities-in-recent-code-changes">Which developer(s) most likely introduced vulnerabilities in recent code changes?</h2> <p><em>Requires integrations with Github or Bitbucket, and code scanning solutions like Veracode or WhiteHat.</em></p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find User that OPENED PR with createdOn > date.now-7days that RELATES TO CodeRepo that HAS (Vulernability|Finding) with _createdOn > date.now-7days return tree </pre> </article> </main>
.png)