Update rules/gravitational_teleport_rules/teleport_long_lived_certs.py

Co-authored-by: Ariel Ropek <[email protected]>
panther-labs · Nov 23, 2023 · 7c68923 · 7c68923
1 parent cdffdcf
commit 7c68923
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/gravitational_teleport_rules/teleport_long_lived_certs.py b/rules/gravitational_teleport_rules/teleport_long_lived_certs.py
@@ -70,7 +70,7 @@ def validity_interval(event):
 
 def title(event):
     return (
-        f"A Certificate for  [{event.get('identity', {}).get('user', '<Cert with no User!?>')}] "
+        f"A Certificate for  [{event.deep_get('identity', 'user', default='<Cert with no User!?>')}] "
         f"on [{event.get('cluster_name', '<UNKNOWN_CLUSTER>')}] "
         f"has been issued for an unusually long time: {validity_interval(event)!r} "
     )