mirror of
https://github.com/falcosecurity/falco.git
synced 2026-03-20 03:32:09 +00:00
17 lines
244 B
YAML
17 lines
244 B
YAML
- list: list_a
|
|
items: [open]
|
|
|
|
- list: list_b
|
|
items: [list_a]
|
|
|
|
- list: list_a
|
|
items: [list_b]
|
|
|
|
- macro: macro_a
|
|
condition: evt.type in (list_a)
|
|
|
|
- rule: sample rule
|
|
priority: WARNING
|
|
output: test
|
|
desc: testdesc
|
|
condition: macro_a |