From cf15028ad76340b11abc664771a4fbb51c498221 Mon Sep 17 00:00:00 2001
From: Evan Gibler <20933572+egibs@users.noreply.github.com>
Date: Mon, 19 Aug 2024 07:10:42 -0500
Subject: [PATCH] Address frp false positive (#413)

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
---
 pkg/compile/compile.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/compile/compile.go b/pkg/compile/compile.go
index 04f5fc765..577b0305e 100644
--- a/pkg/compile/compile.go
+++ b/pkg/compile/compile.go
@@ -31,6 +31,7 @@ var badRules = map[string]bool{
 	"ELASTIC_Macos_Creddump_Keychainaccess_535C1511":      true,
 	"SIGNATURE_BASE_Reconcommands_In_File":                true,
 	"SIGNATURE_BASE_Apt_CN_Tetrisplugins_JS":              true,
+	"ELASTIC_Linux_Proxy_Frp_4213778F":                    true,
 	// ThreatHunting Keywords (some duplicates)
 	"Adobe_XMP_Identifier":                       true,
 	"Antivirus_Signature_signature_keyword":      true,