diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 4a0393a0..e603836e 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -2795,11 +2795,11 @@
   priority: WARNING
   tags: [network]
 
-- rule: Reverse shell
-  desc: Detect reverse shell established remote connection in container.
+- rule: Redirect stdout/stdin to network connection in container 
+  desc: Detect redirecting stdout/stdin to network connection in container (potential reverse shell).
   condition: evt.type=dup and evt.dir=> and container and fd.num in (0, 1, 2) and fd.type in ("ipv4", "ipv6")
   output: >
-    Reverse shell connection (user=%user.name %container.info process=%proc.name parent=%proc.pname cmdline=%proc.cmdline terminal=%proc.tty container_id=%container.id image=%container.image.repository fd.name=%fd.name fd.num=%fd.num fd.type=%fd.type fd.sip=%fd.sip)
+    Redirect stdout/stdin to network connection (user=%user.name %container.info process=%proc.name parent=%proc.pname cmdline=%proc.cmdline terminal=%proc.tty container_id=%container.id image=%container.image.repository fd.name=%fd.name fd.num=%fd.num fd.type=%fd.type fd.sip=%fd.sip)
   priority: WARNING
 
 # Application rules have moved to application_rules.yaml. Please look