Updated Falco Rules (markdown)

Mark Stemm
2017-09-20 17:30:56 -07:00
parent 593c3a43f2
commit 6bea6004a9

@@ -106,7 +106,7 @@ If you use multiple falco rules files, you might want to append new items to an
items: [cp]
```
If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `ls` opened a file.
If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `cp` opened a file.
## Rule Priorities