Added threat hunting docu

2023-05-07 18:16:51 +00:00 · 2023-05-07 18:16:51 +00:00 · 81d0c7e08a
parent be21cdfd94
commit 81d0c7e08a
1 changed files with 3 additions and 0 deletions
--- a/falco/rules.d/Readme.txt
+++ b/falco/rules.d/Readme.txt
@ -0,0 +1,3 @@
+Threat Hunting config for Falco
+
+* created a network logger (process, privileged or not, egress IP) - can be used on internal systems (select internal networks can be excluded)