rule update: fix macro reference

Signed-off-by: kaizhe <derek0405@gmail.com>
This commit is contained in:
kaizhe 2020-05-19 22:11:30 -07:00 committed by poiana
parent 434a5abc8b
commit d1af7e139f

View File

@ -2556,7 +2556,7 @@
items: [rsync, scp, sftp, dcp]
- macro: remote_file_copy_procs
condition: (proc.name in (remote_File_copy_binaries))
condition: (proc.name in (remote_file_copy_binaries))
- rule: Launch Remote File Copy Tools in Container
desc: Detect remote file copy tools launched in container