From 7b1e15226672089ac0dd3ffe6a9b5e7b9b114646 Mon Sep 17 00:00:00 2001 From: egibs <20933572+egibs@users.noreply.github.com> Date: Tue, 29 Oct 2024 16:33:58 -0500 Subject: [PATCH] Add Arc browser talker exception Signed-off-by: egibs <20933572+egibs@users.noreply.github.com> --- detection/c2/unexpected-talkers-macos.sql | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/detection/c2/unexpected-talkers-macos.sql b/detection/c2/unexpected-talkers-macos.sql index a949f8c..82a3ad6 100644 --- a/detection/c2/unexpected-talkers-macos.sql +++ b/detection/c2/unexpected-talkers-macos.sql @@ -95,7 +95,8 @@ WHERE pos.pid IN ( '500,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)', '500,Developer ID Application: Cisco (DE8Y96K9QP)', '500,Developer ID Application: Google LLC (EQHXZ8M8AV)', - '500,Developer ID Application: Valve Corporation (MXGJJ98X76)' + '500,Developer ID Application: Valve Corporation (MXGJJ98X76)', + '500,Developer ID Application: The Browser Company of New York Inc. (S6N382Y83G)' ) AND NOT ( unsigned_exception = '500,6,80,main,main'