Added container domain tag

Aegrah · Aegrah · commit e1e51a0469ef · 2025-12-01T10:55:53.000+01:00
diff --git a/rules/linux/execution_suspicious_pod_or_container_creation_command_execution.toml b/rules/linux/execution_suspicious_pod_or_container_creation_command_execution.toml
@@ -29,6 +29,7 @@ rule_id = "c595363f-52a6-49e1-9257-0e08ae043dbd"
 severity = "medium"
 tags = [
     "Domain: Endpoint",
+    "Domain: Container",
     "OS: Linux",
     "Use Case: Threat Detection",
     "Tactic: Execution",
