From 7446b55120c501449d2217ab6f62636328515224 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Tue, 23 May 2023 11:55:11 -0400 Subject: [PATCH] Fix missing apostrophe --- detection/execution/unexpected-osascript-calls.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detection/execution/unexpected-osascript-calls.sql b/detection/execution/unexpected-osascript-calls.sql index 87bb80c..2c97c97 100644 --- a/detection/execution/unexpected-osascript-calls.sql +++ b/detection/execution/unexpected-osascript-calls.sql @@ -115,7 +115,7 @@ WHERE AND NOT p0_cmd IN ( 'osascript -e do shell script "/bin/rm -Rf /opt/vagrant /usr/local/bin/vagrant" with administrator privileges', 'osascript -e user locale of (get system info)', - '/usr/bin/osascript -e do shell script "/bin/rm -Rf /opt/vagrant /usr/local/bin/vagrant" with administrator privileges + '/usr/bin/osascript -e do shell script "/bin/rm -Rf /opt/vagrant /usr/local/bin/vagrant" with administrator privileges' ) GROUP BY