mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-30 21:25:06 +00:00
rule update: add more comments
Signed-off-by: kaizhe <derek0405@gmail.com>
This commit is contained in:
parent
e81decac13
commit
cdb5d71eb6
@ -2416,6 +2416,7 @@
|
|||||||
tag: [process, mitre_defense_evation]
|
tag: [process, mitre_defense_evation]
|
||||||
|
|
||||||
# This rule is deprecated and will/should never be triggered. Keep it here for backport compatibility.
|
# This rule is deprecated and will/should never be triggered. Keep it here for backport compatibility.
|
||||||
|
# Rule Delete or rename shell history is the preferred rule to use now.
|
||||||
- rule: Delete Bash History
|
- rule: Delete Bash History
|
||||||
desc: Detect bash history deletion
|
desc: Detect bash history deletion
|
||||||
condition: >
|
condition: >
|
||||||
|
Loading…
Reference in New Issue
Block a user