Move wget and curl to own rule

Signed-off-by: Erick Cheng <19863605+ec4n6@users.noreply.github.com>
FedeDP · Nov 29, 2021 · 205a8fd · 205a8fd
1 parent bdba37a
commit 205a8fd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
@@ -2676,7 +2676,7 @@
   tags: [file, mitre_persistence]
 
 - list: remote_file_copy_binaries
-  items: [rsync, scp, sftp, dcp, wget, curl]
+  items: [rsync, scp, sftp, dcp]
 
 - macro: remote_file_copy_procs
   condition: (proc.name in (remote_file_copy_binaries))