RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Make syncthing port range broader, fix gcloud port number typo

This commit is contained in:
Thomas Stromberg 2022-09-30 17:45:45 -04:00
parent 0875483512
commit 0520bedb79
Failed to extract signature
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
net/unexpected-talkers-macos.sql
View File

@ -226,8 +226,8 @@ WHERE protocol > 0
AND NOT ( AND NOT (
p.name = "syncthing" p.name = "syncthing"
AND ( AND (
remote_port IN (53, 80, 88, 110, 443, 587, 993, 3306, 7451) remote_port IN (53, 80, 88, 110, 443, 587, 993)
OR remote_port > 8000 OR remote_port > 1024
) )
) )
AND NOT ( AND NOT (
@ -277,7 +277,7 @@ WHERE protocol > 0
) )
AND NOT ( AND NOT (
p.cmdline LIKE "%google-cloud-sdk/lib/gcloud.py%" p.cmdline LIKE "%google-cloud-sdk/lib/gcloud.py%"
AND remote_port IN (80, 43, 53) AND remote_port IN (80, 443, 53)
) -- Slack update? ) -- Slack update?
AND NOT ( AND NOT (
p.path = "" p.path = ""