Fix invalid logsource on lnx_system_info_discovery rule
This commit is contained in:
@@ -16,7 +16,7 @@ tags:
|
||||
---
|
||||
logsource:
|
||||
product: linux
|
||||
categories: process_creation
|
||||
category: process_creation
|
||||
detection:
|
||||
selection:
|
||||
Image|endswith:
|
||||
@@ -31,7 +31,7 @@ detection:
|
||||
---
|
||||
logsource:
|
||||
product: linux
|
||||
categories: auditd
|
||||
category: auditd
|
||||
detection:
|
||||
selection:
|
||||
type: 'PATH'
|
||||
|
||||
Reference in New Issue
Block a user