From fa97c496c57afc473b9388b48eb8cadf485883fa Mon Sep 17 00:00:00 2001
From: sandeep <8293321+ehsandeep@users.noreply.github.com>
Date: Fri, 22 Sep 2023 16:03:37 +0530
Subject: [PATCH] fixed false negative

---
 dns/elasticbeanstalk-takeover.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/dns/elasticbeanstalk-takeover.yaml b/dns/elasticbeanstalk-takeover.yaml
index 8eadfcf8bfc..60dbebb4cb0 100644
--- a/dns/elasticbeanstalk-takeover.yaml
+++ b/dns/elasticbeanstalk-takeover.yaml
@@ -33,14 +33,13 @@ dns:
 
     matchers-condition: and
     matchers:
-
       - type: regex
         regex:
-          - CNAME\t[a-z0-9_-]*\.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
+          - CNAME\t.*\.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
 
       - type: word
         words:
-          - "NXDOMAIN"
+          - NXDOMAIN
 
     extractors:
       - type: regex