RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add IR no-wifi ruleset

This commit is contained in:
Thomas Stromberg 2022-11-23 07:32:52 -05:00
parent f99109d962
commit 09962c8dca
Failed to extract signature
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Makefile
View File

@ -8,10 +8,14 @@ out/odk-detection.conf: out/osqtool
out/odk-policy.conf: out/osqtool
./out/osqtool --verify pack policy/ > out/odk-policy.conf
out/odk-incident_response.conf: out/osqtool
./out/osqtool --max-duration=8s --verify pack incident_response/ > out/odk-incident_response.conf
out/odk-incident-response.conf: out/osqtool
./out/osqtool --max-duration=8s --verify pack incident_response/ > out/odk-incident-response.conf
packs: out/odk-detection.conf out/odk-policy.conf out/odk-incident_response.conf
# An alternative rules file for configurations where the "wireless_networks" table is forbidden for querying
out/odk-incident-response-no-wifi.conf: out/osqtool
./out/osqtool --max-duration=8s --verify --exclude wireless_networks_macos pack incident_response/ > out/odk-incident-response-no-wifi.conf
packs: out/odk-detection.conf out/odk-policy.conf out/odk-incident-response.conf out/odk-incident-response-no-wifi.conf
out/odk-packs.zip: packs
cd out && zip odk-packs.zip *.conf