ContextQMD
Back to Falco

Remove

content/en/docs/reference/rules/default-macros/remove.md

latest78 B
Original Source
yaml
- macro: remove
  condition: evt.type in (rmdir, unlink, unlinkat)