diff --git a/detections/endpoint/linux_possible_append_command_to_profile_config_file.yml b/detections/endpoint/linux_possible_append_command_to_profile_config_file.yml
index e382b1d906..cd3a8eca4c 100644
--- a/detections/endpoint/linux_possible_append_command_to_profile_config_file.yml
+++ b/detections/endpoint/linux_possible_append_command_to_profile_config_file.yml
@@ -22,14 +22,14 @@ search: |-
 
     Processes.process = "*echo*"
     (
-        Processes.process IN ("*/home/*", "*~/*")
+        Processes.process IN ("*/home/*", "*~/*", "*/etc/*")
         Processes.process IN (
             "*/.bash_login*",
             "*/.bash_logout*",
             "*/.bash_profile*",
             "*/.bashrc*",
             "*/.profile*",
-            "*/etc/profile*"
+            "*/profile*"
         )
         OR
         (
diff --git a/detections/endpoint/python_network_traffic_during_package_build.yml b/detections/endpoint/python_network_traffic_during_package_build.yml
index eeb6f097b7..b5b36b69b2 100644
--- a/detections/endpoint/python_network_traffic_during_package_build.yml
+++ b/detections/endpoint/python_network_traffic_during_package_build.yml
@@ -46,7 +46,7 @@ search: |-
 
       by dest source process_id
 
-    | search process="* build_wheel*"
+    | search process="* build_wheel*" dest_ip=*
 
     | table firstTime lastTime
             parent_process_id parent_process_path parent_process_name parent_process