Update execution_sap_netweaver_jsp_webshell.toml

Author: Samirbous

rules/cross-platform/execution_sap_netweaver_jsp_webshell.toml

@@ -7,7 +7,7 @@ updated_date = "2025/04/26"
 [rule]
 author = ["Elastic"]
 description = """
-Identifies suspicious JSP file creation in the root directory of the SAP NetWeaver application. This may indicate an attempt to deploy a webshell.
+Identifies suspicious Java file creation in the IRJ directory of the SAP NetWeaver application. This may indicate an attempt to deploy a webshell.
 """
 from = "now-9m"
 index = ["auditbeat-*", "logs-endpoint.events.process*"]