From d850d12761828c37bdff9acd5dae7ad0e3024123 Mon Sep 17 00:00:00 2001
From: "Austin Songer,MIS,CEH,ESCA,Project+ (Navy Veteran)"
 <a.songer@protonmail.com>
Date: Thu, 29 Aug 2024 14:33:37 -0500
Subject: [PATCH] Update aws.discovery.ec2-download-user-data.md (#559)

---
 .../AWS/aws.discovery.ec2-download-user-data.md                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/attack-techniques/AWS/aws.discovery.ec2-download-user-data.md b/docs/attack-techniques/AWS/aws.discovery.ec2-download-user-data.md
index 9b2ef19e..7319cf9f 100755
--- a/docs/attack-techniques/AWS/aws.discovery.ec2-download-user-data.md
+++ b/docs/attack-techniques/AWS/aws.discovery.ec2-download-user-data.md
@@ -48,7 +48,7 @@ Through CloudTrail's <code>DescribeInstanceAttribute</code> event.
 
 See:
 
-* [Associated Sigma rule](https://github.com/SigmaHQ/sigma/blob/master/rules/cloud/aws/aws_ec2_download_userdata.yml)
+* [Associated Sigma rule](https://github.com/SigmaHQ/sigma/blob/master/unsupported/cloud/aws_ec2_download_userdata.yml)
 
 
 ## Detonation logs <span class="smallcaps w3-badge w3-light-green w3-round w3-text-sand">new!</span>