RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #415 from egibs/arc-unexpected-talker-exception 

Add Arc browser talker exception
This commit is contained in:
Dave Smith 2024-10-29 17:43:13 -04:00 committed by GitHub
parent b47bc10f2e 7b1e152266
commit 12077261e7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
detection/c2/unexpected-talkers-macos.sql
View File

@ -95,7 +95,8 @@ WHERE pos.pid IN (
'500,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)', '500,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)',
'500,Developer ID Application: Cisco (DE8Y96K9QP)', '500,Developer ID Application: Cisco (DE8Y96K9QP)',
'500,Developer ID Application: Google LLC (EQHXZ8M8AV)', '500,Developer ID Application: Google LLC (EQHXZ8M8AV)',
'500,Developer ID Application: Valve Corporation (MXGJJ98X76)' '500,Developer ID Application: Valve Corporation (MXGJJ98X76)',
'500,Developer ID Application: The Browser Company of New York Inc. (S6N382Y83G)'
) )
AND NOT ( AND NOT (
unsigned_exception = '500,6,80,main,main' unsigned_exception = '500,6,80,main,main'