Update proc_creation_lnx_rsync_shell_spawn.yml

SigmaHQ · Jan 18, 2025 · b82fd22 · b82fd22
1 parent dadfa7c
commit b82fd22
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/linux/process_creation/proc_creation_lnx_rsync_shell_spawn.yml b/rules/linux/process_creation/proc_creation_lnx_rsync_shell_spawn.yml
@@ -16,7 +16,7 @@ logsource:
     category: process_creation
     product: linux
 detection:
-    selection_parent:
+    selection:
         ParentImage|endswith:
             - '/rsync'
             - '/rsyncd'