diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index da1c8b7e..1b2c2669 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -2876,7 +2876,10 @@
 # - k8s.gcr.io/fluentd-gcp-scaler in GCP/GKE
 - macro: user_known_k8s_client_container
   condition: >
-    (k8s.ns.name="kube-system" and container.image.repository=k8s.gcr.io/fluentd-gcp-scaler) or
+    (k8s.ns.name="kube-system" and (
+      container.image.repository=k8s.gcr.io/fluentd-gcp-scaler or
+      container.image.repository=k8s.gcr.io/node-problem-detector/node-problem-detector
+    )) or
     container.image.repository=mcr.microsoft.com/aks/hcp/hcp-tunnel-front
 
 - macro: user_known_k8s_client_container_parens