Skip to content

Commit

Permalink
Fix remove scp and add curl
Browse files Browse the repository at this point in the history
Signed-off-by: Erick Cheng <19863605+ec4n6@users.noreply.github.com>
  • Loading branch information
erickatwork authored and poiana committed Nov 29, 2021
1 parent 19fb345 commit bdba37a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rules/falco_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2676,7 +2676,7 @@
tags: [file, mitre_persistence]

- list: remote_file_copy_binaries
items: [rsync, scp, sftp, dcp, wget, scp]
items: [rsync, scp, sftp, dcp, wget, curl]

- macro: remote_file_copy_procs
condition: (proc.name in (remote_file_copy_binaries))
Expand Down

0 comments on commit bdba37a

Please sign in to comment.