From 3697d1fae2f436431529cf29ef07ca9cd2dee150 Mon Sep 17 00:00:00 2001 From: Alessandro Brucato Date: Tue, 18 Oct 2022 13:12:28 +0200 Subject: [PATCH] Fixed typo Signed-off-by: Alessandro Brucato --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 2fbd9001..4bd7310c 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -3244,7 +3244,7 @@ - list: known_ptrace_binaries items: [] -- marco: known_ptrace_procs +- macro: known_ptrace_procs condition: (proc.name in (known_ptrace_binaries)) - rule: PTRACE attached to process