diff --git a/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go b/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
index d46aec84..4e41f4a8 100644
--- a/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
+++ b/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
@@ -59,7 +59,6 @@ var whitelistedProcessesForMaliciousSource = []string{
 	"bash",
 	"dash",
 	"sh",
-	"perl",
 	"supervisord",
 }