github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-17 15:28:18 +00:00
Code Issues Projects Releases Wiki Activity

Add nagios as a monitoring binary

Browse Source 
Runs lots of shells
This commit is contained in:
Mark Stemm
2017-11-08 13:38:07 -08:00
parent e7c2068267
commit 27df0ad29b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@@ -242,7 +242,7 @@
items: [bro, broctl] items: [bro, broctl]
- list: monitoring_binaries - list: monitoring_binaries
items: [icinga2, nrpe, npcd, check_sar_perf., qualys-cloud-ag, S99qualys-cloud] items: [icinga2, nrpe, npcd, check_sar_perf., qualys-cloud-ag, S99qualys-cloud, nagios]
- macro: system_procs - macro: system_procs
condition: proc.name in (coreutils_binaries, user_mgmt_binaries) condition: proc.name in (coreutils_binaries, user_mgmt_binaries)