Skip to content

Commit 8af6a90

Browse files
committed
file name issue fix
1 parent 1eefd8f commit 8af6a90

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

detections/endpoint/linux_auditd_magic_system_request_key.yml renamed to detections/endpoint/linux_magic_sysrq_key_abuse.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ search: '`linux_auditd` type=Path name="/proc/sysrq-trigger" OR name="/proc/sys/
1717
| stats count min(_time) as firstTime max(_time) as lastTime by dest name
1818
| `security_content_ctime(firstTime)`
1919
| `security_content_ctime(lastTime)`
20-
| `linux_macro_sysrq_abuse_filter`'
20+
| `linux_magic_sysrq_key_abuse_filter`'
2121
how_to_implement: |
2222
To implement this detection, ensure auditd is configured to watch:
2323
- /proc/sysrq-trigger

0 commit comments

Comments
 (0)