Is your feature request related to a problem? Please describe.
The risk message for linux_service_started_or_enabled is malformed, as the reference to the dest field is missing a $
|
message: a commandline $process$ that may create or start a service on $dest |
Describe the solution you'd like
Adding a single $ at the end should fix the issue. Could also capitalize the message for consistency.
message: A commandline $process$ that may create or start a service on $dest$
Is your feature request related to a problem? Please describe.
The risk message for linux_service_started_or_enabled is malformed, as the reference to the
destfield is missing a$security_content/detections/endpoint/linux_service_started_or_enabled.yml
Line 57 in 64a8212
Describe the solution you'd like
Adding a single
$at the end should fix the issue. Could also capitalize the message for consistency.