github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-01 09:02:18 +00:00
Code Issues Projects Releases Wiki Activity

rule(Delete Bash History): Fix typo in tags

Browse Source 
Signed-off-by: Bob Aman <bob@sporkmonger.com>
This commit is contained in:
Bob Aman 2020-04-13 19:45:17 -07:00 committed by poiana
parent 534a642074
commit ffa137fc7c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -2493,7 +2493,7 @@
Shell history had been deleted or renamed (user=%user.name type=%evt.type command=%proc.cmdline fd.name=%fd.name name=%evt.arg.name path=%evt.arg.path oldpath=%evt.arg.oldpath %container.info)
priority:
WARNING
tags: [process, mitre_defense_evation]
tags: [process, mitre_defense_evasion]
- macro: consider_all_chmods
condition: (always_true)