diff --git a/http/misconfiguration/shell-history.yaml b/http/misconfiguration/shell-history.yaml
index 9d07be82e9..70b21da387 100644
--- a/http/misconfiguration/shell-history.yaml
+++ b/http/misconfiguration/shell-history.yaml
@@ -31,7 +31,9 @@ http:
           - "sudo "
           - "cd "
           - "cp "
-          - "ps aux "
+          - "ps aux"
+          - "ls "
+          - "logout"
         condition: or
 
       - type: word