github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-06 17:20:49 +00:00
Code Issues Projects Releases Wiki Activity

Updated Falco Rules (markdown)

Mark Stemm
2017-09-20 17:30:56 -07:00
parent 593c3a43f2
commit 6bea6004a9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Falco-Rules.md

@@ -106,7 +106,7 @@ If you use multiple falco rules files, you might want to append new items to an
items: [cp] items: [cp]
``` ```
If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `ls` opened a file. If you ran falco via `falco -r falco_rules.yaml -r falco_rules-additional.yaml`, the rule `my_programs_opened_file` would trigger whenever any of `ls`, `cat`, `pwd`, or `cp` opened a file.
## Rule Priorities ## Rule Priorities