diff --git a/rules/linux/file_create/file_create_lnx_persistence_sudoers_files.yml b/rules/linux/file_create/file_create_lnx_persistence_sudoers_files.yml index be7e1f5d9..d7e0270c2 100644 --- a/rules/linux/file_create/file_create_lnx_persistence_sudoers_files.yml +++ b/rules/linux/file_create/file_create_lnx_persistence_sudoers_files.yml @@ -14,7 +14,7 @@ detection: TargetFilename|startswith: '/etc/sudoers.d/' condition: selection falsepositives: - - Creation of legitimate files in sudoers.d folder par of administrator work + - Creation of legitimate files in sudoers.d folder part of administrator work level: medium tags: - attack.persistence