github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 00:22:15 +00:00
Code Issues Projects Releases Wiki Activity

Fix more typos

Browse Source 
Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
This commit is contained in:
Mateusz Gozdek 2022-04-16 21:23:19 +02:00 committed by poiana
parent 53eb6112a6
commit 1fdfbd3a3d
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/okta_rules.yaml
View File

@ -167,7 +167,7 @@
- macro: user_known_countries - macro: user_known_countries
condition: (okta.client.geo.country in (allowed_countries_list)) condition: (okta.client.geo.country in (allowed_countries_list))
- rule: Detecting unknwon logins using geolocation - rule: Detecting unknown logins using geolocation
desc: Detect a logins event based on user geolocation desc: Detect a logins event based on user geolocation
condition: okta.evt.type = "user.session.start" and not user_known_countries condition: okta.evt.type = "user.session.start" and not user_known_countries
output: "A user logged in OKTA from a suspicious country (user=%okta.actor.name, ip=%okta.client.ip, country=%okta.client.geo.country)" output: "A user logged in OKTA from a suspicious country (user=%okta.actor.name, ip=%okta.client.ip, country=%okta.client.geo.country)"

2
userspace/engine/stats_manager.h
View File

@ -40,7 +40,7 @@ public:
uint32_t index); uint32_t index);
/*! /*!
\brief Formats the internal statistics into the out sring \brief Formats the internal statistics into the out string
*/ */
virtual void format( virtual void format(
const indexed_vector<falco_rule>& rules, const indexed_vector<falco_rule>& rules,