mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-06 17:35:19 +00:00
restore original rule
This commit is contained in:
parent
e1cd98c97d
commit
424f1523d8
@ -9,9 +9,9 @@ references:
|
||||
logsource:
|
||||
product: linux
|
||||
detection:
|
||||
keyword|startswith:
|
||||
- 'http_proxy='
|
||||
- 'https_proxy='
|
||||
keyword:
|
||||
- 'http_proxy=*'
|
||||
- 'https_proxy=*'
|
||||
condition: keyword
|
||||
falsepositives:
|
||||
- Legitimate administration activities
|
||||
|
Loading…
Reference in New Issue
Block a user