restore original rule

This commit is contained in:
yugoslavskiy 2020-11-30 01:32:06 +01:00 committed by GitHub
parent e1cd98c97d
commit 424f1523d8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -9,9 +9,9 @@ references:
logsource:
product: linux
detection:
keyword|startswith:
- 'http_proxy='
- 'https_proxy='
keyword:
- 'http_proxy=*'
- 'https_proxy=*'
condition: keyword
falsepositives:
- Legitimate administration activities