rule update: fix macro reference

Signed-off-by: kaizhe <derek0405@gmail.com>
falcosecurity · May 21, 2020 · d1af7e1 · d1af7e1
1 parent 434a5ab
commit d1af7e1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
@@ -2556,7 +2556,7 @@
   items: [rsync, scp, sftp, dcp]
 
 - macro: remote_file_copy_procs
-  condition: (proc.name in (remote_File_copy_binaries))
+  condition: (proc.name in (remote_file_copy_binaries))
 
 - rule: Launch Remote File Copy Tools in Container
   desc: Detect remote file copy tools launched in container