AWS EC2 Startup Shell Script Change — Detection Rule

Detects changes to the EC2 instance startup script. The shell script will be executed as root/SYSTEM every time the specific instances are booted up.

Read the full analysis on IntelFusions