From bf7ebf1aaa70cf9a0299792ed87110ba3131d5c4 Mon Sep 17 00:00:00 2001
From: Carter Li <zhangsongcui3371@sina.com>
Date: Wed, 4 Nov 2026 13:36:44 +0800
Subject: [PATCH] Shell: ignores atuin

Fixes #2704
---
 src/detection/terminalshell/terminalshell_linux.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/detection/terminalshell/terminalshell_linux.c b/src/detection/terminalshell/terminalshell_linux.c
index daeec5247..9fa06f454 100644
--- a/src/detection/terminalshell/terminalshell_linux.c
+++ b/src/detection/terminalshell/terminalshell_linux.c
@@ -61,6 +61,7 @@ static pid_t getShellInfo(FFShellResult* result, pid_t pid) {
                 ffStrbufEqualS(&result->processName, "flashfetch") ||
                 ffStrbufEqualS(&result->processName, "mise") ||
                 ffStrbufEqualS(&result->processName, "mise-shim") ||
+                ffStrbufEqualS(&result->processName, "atuin") ||
                 ffStrbufEqualS(&result->processName, "proot") ||
                 ffStrbufEqualS(&result->processName, "script") ||
 #ifdef __linux__