github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-29 16:17:32 +00:00
Code Issues Projects Releases Wiki Activity

rule update: fix macro reference

Browse Source 
Signed-off-by: kaizhe <derek0405@gmail.com>
This commit is contained in:
kaizhe 2020-05-19 22:11:30 -07:00 committed by poiana
parent 434a5abc8b
commit d1af7e139f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -2556,7 +2556,7 @@
items: [rsync, scp, sftp, dcp] items: [rsync, scp, sftp, dcp]
- macro: remote_file_copy_procs - macro: remote_file_copy_procs
condition: (proc.name in (remote_File_copy_binaries)) condition: (proc.name in (remote_file_copy_binaries))
- rule: Launch Remote File Copy Tools in Container - rule: Launch Remote File Copy Tools in Container
desc: Detect remote file copy tools launched in container desc: Detect remote file copy tools launched in container