mirror of
https://github.com/falcosecurity/falco.git
synced 2025-06-29 08:07:24 +00:00
rule update: fix macro reference
Signed-off-by: kaizhe <derek0405@gmail.com>
This commit is contained in:
parent
434a5abc8b
commit
d1af7e139f
@ -2556,7 +2556,7 @@
|
||||
items: [rsync, scp, sftp, dcp]
|
||||
|
||||
- macro: remote_file_copy_procs
|
||||
condition: (proc.name in (remote_File_copy_binaries))
|
||||
condition: (proc.name in (remote_file_copy_binaries))
|
||||
|
||||
- rule: Launch Remote File Copy Tools in Container
|
||||
desc: Detect remote file copy tools launched in container
|
||||
|
Loading…
Reference in New Issue
Block a user