diff --git a/nursery/get-user-database-entry-on-linux.yml b/nursery/get-password-database-entry-on-linux.yml
similarity index 84%
rename from nursery/get-user-database-entry-on-linux.yml
rename to nursery/get-password-database-entry-on-linux.yml
index faf12829..e776243f 100644
--- a/nursery/get-user-database-entry-on-linux.yml
+++ b/nursery/get-password-database-entry-on-linux.yml
@@ -11,3 +11,5 @@ rule:
       - or:
         - api: getpwuid
         - api: getpwuid_r
+        - api: getpwnam
+        - api: getpwnam_r
diff --git a/nursery/create-detached-thread-on-linux.yml b/nursery/mark-thread-detached-on-linux.yml
similarity index 82%
rename from nursery/create-detached-thread-on-linux.yml
rename to nursery/mark-thread-detached-on-linux.yml
index ed33f4ea..3eb0e5f5 100644
--- a/nursery/create-detached-thread-on-linux.yml
+++ b/nursery/mark-thread-detached-on-linux.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: create detached thread on Linux
+    name: mark thread detached on Linux
     namespace: host-interaction/thread
     authors:
       - michael.hunhoff@mandiant.com