fix: rule logic

2023-01-25 12:03:11 +01:00
parent d47215d469
commit f42eb77f29
1 changed files with 1 additions and 1 deletions
@@ -14,7 +14,7 @@ logsource:
    product: linux
 detection:
    selection:
-        '|contains': 'bpf_probe_write_user'
+        - 'bpf_probe_write_user'
    condition: selection
 falsepositives:
    - Unknown