RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-28 07:50:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add lock exception for pipewire

Browse Source
This commit is contained in:
Thomas Stromberg 2023-06-02 19:22:26 -04:00
parent 066c88dc18
commit 1c3d461392
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/persistence/unexpected-lock-opener.sql
View File

@ -66,6 +66,7 @@ WHERE
'200,softwareupdated,/private~/SplunkHistory',
'500,Opera,~/Library/Application Support/com.operasoftware.Opera',
'500,com.docker.build,~/.docker/desktop-build',
'500,pipewire,/run/user/1000',
'500,Ecamm Live Stream Deck Plugin,~/Library/Application Support/com.elgato.StreamDeck/Sentry',
'500,Beeper,~/Library/Application Support/Beeper/EventStore',
'500,bridge-gui,~/Library/Application Support/protonmail/bridge-v3/sentry_cache',