You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/cse/match-lists-suppressed-lists/standard-match-lists.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -546,9 +546,9 @@ The following Cloud SIEM rules refer to this match list:
546
546
547
547
### known_docker_images
548
548
549
-
**Target column:**Source IP Address (`SrcIp`)
549
+
**Target column:**Username (`Username`)
550
550
551
-
**Description:**Hosts that are known to be involved with specific administrative or privileged activity in Docker.
551
+
**Description:**Unrecognized Docker container images that may indicate an attempt to bypass security controls on existing images or escalate privileges.
552
552
553
553
The following Cloud SIEM rules refer to this match list:
0 commit comments