Back to Falco

Shell Procs

content/en/docs/reference/rules/default-macros/shell_procs.md

latest77 B
Original Source
yaml
- macro: shell_procs
  condition: (proc.name in (shell_binaries))