From 7cca2ab188e35499640c68b913adf90435054a2f Mon Sep 17 00:00:00 2001 From: stevenshuang Date: Tue, 23 Mar 2021 17:06:22 +0800 Subject: [PATCH] fix: update rule description Signed-off-by: stevenshuang --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index d2f8a129e55..a7fc23adacd 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -830,7 +830,7 @@ condition: (never_true) - rule: Write below monitored dir - desc: an attempt to write to any file below a set of binary directories + desc: an attempt to write to any file below a set of monitored directories condition: > evt.dir = < and open_write and monitored_dir and not exe_running_docker_save