added fish to macos rule

2024-11-06 17:35:19 +00:00 · 2020-10-17 02:37:21 +03:00 · 2020-10-17 02:37:21 +03:00 · 29f2f1acfe
commit 29f2f1acfe
parent 65854752a9
1 changed files with 1 additions and 0 deletions
--- a/rules/linux/macos_susp_histfile_operations.yml
+++ b/rules/linux/macos_susp_histfile_operations.yml
@ -22,6 +22,7 @@ detection:
            - '.zhistory'
            - '.history'
            - '.sh_history'
+            - 'fish_history'
    condition: selection
 falsepositives:
    - 'Legitimate administrative activity'