valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 01:45:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update lnx_install_root_certificate.yml

Browse Source
This commit is contained in:
Ömer Günal 2020-11-10 20:09:46 +03:00 committed by GitHub
parent f41accab33
commit ab959394ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/linux/lnx_install_root_certificate.yml
View File

@ -16,8 +16,8 @@ detection:
ProcessName|endswith:
- '/update-ca-certificates'
selection2:
CommandLine|contains|all:
- 'update-ca-trust'
ProcessName|endswith:
- '/update-ca-trust'
condition: selection or selection2
falsepositives:
- Legitimate administration activities