mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-02 01:22:16 +00:00
rule(Delete Bash History): Fix typo in tags
Signed-off-by: Bob Aman <bob@sporkmonger.com>
This commit is contained in:
parent
534a642074
commit
ffa137fc7c
@ -2493,7 +2493,7 @@
|
|||||||
Shell history had been deleted or renamed (user=%user.name type=%evt.type command=%proc.cmdline fd.name=%fd.name name=%evt.arg.name path=%evt.arg.path oldpath=%evt.arg.oldpath %container.info)
|
Shell history had been deleted or renamed (user=%user.name type=%evt.type command=%proc.cmdline fd.name=%fd.name name=%evt.arg.name path=%evt.arg.path oldpath=%evt.arg.oldpath %container.info)
|
||||||
priority:
|
priority:
|
||||||
WARNING
|
WARNING
|
||||||
tags: [process, mitre_defense_evation]
|
tags: [process, mitre_defense_evasion]
|
||||||
|
|
||||||
- macro: consider_all_chmods
|
- macro: consider_all_chmods
|
||||||
condition: (always_true)
|
condition: (always_true)
|
||||||
|
Loading…
Reference in New Issue
Block a user