diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index 43580b4c..ee5fb38e 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit 43580b4cebd404bbc71a2488480df7c3405e0bfd
+Subproject commit ee5fb38eba6cb65dbab74e668e18c28db2b2ff23