From d1af7e139f140214622ae4fe087f5d345fa48d39 Mon Sep 17 00:00:00 2001 From: kaizhe Date: Tue, 19 May 2020 22:11:30 -0700 Subject: [PATCH] rule update: fix macro reference Signed-off-by: kaizhe --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index d6dc101c..c985f736 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -2556,7 +2556,7 @@ items: [rsync, scp, sftp, dcp] - macro: remote_file_copy_procs - condition: (proc.name in (remote_File_copy_binaries)) + condition: (proc.name in (remote_file_copy_binaries)) - rule: Launch Remote File Copy Tools in Container desc: Detect remote file copy tools launched in container