Skip to content

Commit

Permalink
chore: Fix typo s/occured/occurred/ (#1274)
Browse files Browse the repository at this point in the history
Signed-off-by: hugo-syn <hugo.vincent@synacktiv.com>
  • Loading branch information
hugo-syn committed Jan 18, 2024
1 parent 280d93e commit 3b7061e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/development/sync-protocol.md
Original file line number Diff line number Diff line change
Expand Up @@ -187,7 +187,7 @@ sequenceDiagram
| file_path | YES | string | Absolute file path to the executable that was blocked | "/tmp/foo" |
| file_name | YES | string | Command portion of the path of the blocked executable | "foo" |
| executing_user | NO | string | Username that executed the binary | "markowsky" |
| execution_time | NO | float64 | Unix timestamp of when the execution occured | 23344234232 |
| execution_time | NO | float64 | Unix timestamp of when the execution occurred | 23344234232 |
| loggedin_users | NO | list of strings | List of usernames logged in according to utmp | ["markowsky"] |
| current_sessions | NO | list of strings | List of user sessions | ["markowsky@console", "markowsky@ttys000"] |
| decision | YES | string | The decision Santa made for this binary, BUNDLE_BINARY is used to preemptively report binaries in a bundle. **Must be one of the examples** | "ALLOW_BINARY", "ALLOW_CERTIFICATE", "ALLOW_SCOPE", "ALLOW_TEAMID", "ALLOW_UNKNOWN", "BLOCK_BINARY", "BLOCK_CERTIFICATE", "BLOCK_SCOPE", "BLOCK_TEAMID", "BLOCK_UNKNOWN", "BUNDLE_BINARY" |
Expand Down

0 comments on commit 3b7061e

Please sign in to comment.