updated rule names

Signed-off-by: Afek Berger <[email protected]>

Author: afek854

tests/chart/templates/node-agent/default-rule-binding.yaml

@@ -15,29 +15,29 @@ spec:
         - "kubeconfig"
   rules:
     - ruleName: "Unexpected process launched"
-    - ruleName: "Unexpected file access"
+    - ruleName: "Files Access Anomalies in container"
       parameters:
         ignoreMounts: true
         ignorePrefixes: ["/proc", "/run/secrets/kubernetes.io/serviceaccount", "/var/run/secrets/kubernetes.io/serviceaccount", "/tmp"]
-    - ruleName: "Unexpected system call"
-    - ruleName: "Unexpected capability used"
-    - ruleName: "Unexpected domain request"
-    - ruleName: "Unexpected Service Account Token Access"
-    - ruleName: "Kubernetes Client Executed"
-    - ruleName: "Exec from malicious source"
-    - ruleName: "Kernel Module Load"
-    - ruleName: "Exec Binary Not In Base Image"
-    - ruleName: "Malicious SSH Connection"
-    - ruleName: "Fileless Execution"
-    - ruleName: "XMR Crypto Mining Detection"
-    - ruleName: "Exec from mount"
+    - ruleName: "Syscalls Anomalies in container"
+    - ruleName: "Linux Capabilities Anomalies in container"
+    - ruleName: "DNS Anomalies in container"
+    - ruleName: "Unexpected service account token access"
+    - ruleName: "Workload uses Kubernetes API unexpectedly"
+    - ruleName: "Process executed from malicious source"
+    - ruleName: "Process tries to load a kernel module"
+    - ruleName: "Drifted process executed"
+    - ruleName: "Disallowed ssh connection"
+    - ruleName: "Fileless execution detected"
+    - ruleName: "Crypto miner launched"
+    - ruleName: "Process executed from mount"
     - ruleName: "Crypto Mining Related Port Communication"
     - ruleName: "Crypto Mining Domain Communication"
     - ruleName: "Read Environment Variables from procfs"
     - ruleName: "eBPF Program Load"
-    - ruleName: "Symlink Created Over Sensitive File"
+    - ruleName: "Soft link created over sensitive file"
     - ruleName: "Unexpected Sensitive File Access"
-    - ruleName: "Hardlink Created Over Sensitive File"
+    - ruleName: "Hard link created over sensitive file"
     - ruleName: "Exec to pod"
     - ruleName: "Port forward"
     - ruleName: "Unexpected Egress Network Traffic"