RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add deskflow-server and additional repos directory 

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
This commit is contained in:
egibs 2024-10-30 10:28:00 -05:00
parent 4b47a29a2c
commit 18e9879b01
Failed to extract signature
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
detection/credentials/macos_keyboard_sniffer.sql
View File

@ -79,7 +79,8 @@ WHERE
'polyrecorder,polyrecorder,Developer ID Application: Adam Pietrasiak (SXF593CX2N)', 'polyrecorder,polyrecorder,Developer ID Application: Adam Pietrasiak (SXF593CX2N)',
'skhd,skhd,', 'skhd,skhd,',
'LinearMouse,com.lujjjh.LinearMouse,Developer ID Application: Jiahao Lu (C5686NKYJ7)', 'LinearMouse,com.lujjjh.LinearMouse,Developer ID Application: Jiahao Lu (C5686NKYJ7)',
'synergy-core,synergy-core,Developer ID Application: Symless Ltd (4HX897Y6GJ)' 'synergy-core,synergy-core,Developer ID Application: Symless Ltd (4HX897Y6GJ)',
'deskflow-server,deskflow-server,'
) )
GROUP BY GROUP BY
p0.path p0.path

1
detection/execution/unexpected-execdir-macos.sql
View File

@ -111,6 +111,7 @@ WHERE
'~/Applications (Parallels)/', '~/Applications (Parallels)/',
'~/bin/', '~/bin/',
'~/.cargo/', '~/.cargo/',
'~/chainguard_repos/',
'~/code/', '~/code/',
'~/Code/', '~/Code/',
'~/.config/', '~/.config/',