diff --git a/Falco-Rules.md b/Falco-Rules.md index a1f8123..6840f75 100644 --- a/Falco-Rules.md +++ b/Falco-Rules.md @@ -106,7 +106,7 @@ If you use multiple falco rules files, you might want to append new items to an items: [cp] ``` -If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `ls` opened a file. +If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `cp` opened a file. ## Rule Priorities