superlgn

### Description I'm seeing another false positive on rule 932260, with a last name of "Cronk" matching against unix-shell-4andup.ra:cron. ### How to reproduce the misbehavior (-> curl call) The sandbox...

Shell false positives for rules 932260 and 932236

17

### Description I've encountered some shell false positives for 932260 (PL1) , 932236 and 932239 (PL2) for commands like sudo, df, fd, and grc. Some of these I'm obviously familiar...