Skip to content

Commit

Permalink
minor fix
Browse files Browse the repository at this point in the history
  • Loading branch information
Kaizhe committed Apr 12, 2019
1 parent 45da66c commit 30a9814
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rules/falco_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1949,7 +1949,7 @@
desc: >
Detect grep private keys or passwords activity.
condition: >
(spawned_process and container and
(spawned_process and
((grep_commands and private_key_or_password) or
(proc.name = "find" and (proc.args contains "id_rsa" or proc.args contains "id_dsa")))
)
Expand Down

0 comments on commit 30a9814

Please sign in to comment.