Skip to content

Commit ab27c37

Browse files
Update rules/linux/initial_access_apache_struts_cve_2023_50164_exploitation_to_webshell.toml
Co-authored-by: Eric Forte <[email protected]>
1 parent 5810869 commit ab27c37

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/linux/initial_access_apache_struts_cve_2023_50164_exploitation_to_webshell.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@ sequence by agent.id with maxspan=10s
109109
file.path like "*/webapps/*" and
110110
not file.path like "*/WEB-INF/*" and
111111
not file.path like "*/META-INF/*" and
112-
not process.parent.name in ("apt", "apt-get", "dpkg", "yum", "rpm", "dnf", "systemd", "init")]
112+
not process.parent.name in ("apk", "apt", "apt-get", "dpkg", "yum", "rpm", "dnf", "systemd", "init")]
113113
'''
114114

115115
[[rule.threat]]

0 commit comments

Comments
 (0)