From 6bea6004a94e8d44bd5db44e19ff60fa0c9c11f2 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Wed, 20 Sep 2017 17:30:56 -0700 Subject: [PATCH] Updated Falco Rules (markdown) --- Falco-Rules.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Falco-Rules.md b/Falco-Rules.md index a1f8123..6840f75 100644 --- a/Falco-Rules.md +++ b/Falco-Rules.md @@ -106,7 +106,7 @@ If you use multiple falco rules files, you might want to append new items to an items: [cp] ``` -If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `ls` opened a file. +If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `cp` opened a file. ## Rule Priorities