diff --git a/data/paths/ecs/ecs-006.yaml b/data/paths/ecs/ecs-006.yaml
index 5b62a81..b581fb0 100644
--- a/data/paths/ecs/ecs-006.yaml
+++ b/data/paths/ecs/ecs-006.yaml
@@ -117,6 +117,9 @@ references:
   - title: "Monitor Amazon ECS containers with ECS Exec - AWS Documentation"
     url: "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html"
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/4f18bfc33cd2709ef3535e7c3ee0ad7ad72e8aa2/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L258
+
 attackVisualization:
   nodes:
     - id: start