RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-05 12:59:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add coreduetd exception

Browse Source
This commit is contained in:
Thomas Stromberg 2022-10-24 11:09:21 -04:00
parent 2f7e76d23c
commit 17f77468f4
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/exfil/high_disk_bytes_read.sql
View File

@ -60,6 +60,7 @@ WHERE
AND NOT p.path IN (
'/usr/bin/dockerd',
'/usr/bin/gnome-shell',
'/usr/libexec/coreduetd',
'/usr/bin/udevadm',
'/usr/libexec/aned',
'/usr/libexec/logd',