Merge pull request #272 from tstromberg/unattended

Add unattended-upgrades.pid (Ubuntu)
2023-06-07 15:19:58 -04:00 · 2023-06-07 15:19:58 -04:00 · 06b95a57b3
parent d6db5838d5 404b7125f7
commit 06b95a57b3
1 changed files with 1 additions and 0 deletions
--- a/detection/evasion/unexpected-var-run-linux.sql
+++ b/detection/evasion/unexpected-var-run-linux.sql
@ -33,6 +33,7 @@ WHERE
    'apcupsd.pid',
    'apport.lock',
    'atd.pid',
+    'unattended-upgrades.pid',
    "auditd.pid",
    "crond.pid",
    'crond.reboot',