From 0a08c225600ebf1244a58c9643615e74c2c3e2e6 Mon Sep 17 00:00:00 2001 From: chip hwang Date: Tue, 22 May 2018 13:40:51 -0700 Subject: [PATCH] fixed my email to commit does not get rejected --- rules/falco_rules.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index ed7c4a51131..ee5144142c5 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -926,6 +926,7 @@ - macro: ossec_syscheckd condition: proc.name=ossec-syscheckd + - rule: Read sensitive file untrusted desc: > an attempt to read any sensitive file (e.g. files containing user/password/authentication