diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index a95a00e5..5f050bd3 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -194,7 +194,7 @@
   items: [login_binaries, passwd_binaries, shadowutils_binaries]
 
 - list: dev_creation_binaries
-  items: [blkid, rename_device]
+  items: [blkid, rename_device, update_engine]
 
 - list: aide_wrapper_binaries
   items: [aide.wrapper, update-aide.con]