From 2731759d9be723bc4c5d8d3c8493501a32489395 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Thu, 15 Dec 2022 09:07:11 -0500 Subject: [PATCH] Add Signal Helper --- detection/c2/unexpected-talkers-macos.sql | 1 + 1 file changed, 1 insertion(+) diff --git a/detection/c2/unexpected-talkers-macos.sql b/detection/c2/unexpected-talkers-macos.sql index 08b2d3a..47ebb6e 100644 --- a/detection/c2/unexpected-talkers-macos.sql +++ b/detection/c2/unexpected-talkers-macos.sql @@ -251,6 +251,7 @@ WHERE '443,6,500,vim,vim,', '443,6,500,zoom.us,us.zoom.xos,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)', '443,6,500,zsh,com.apple.zsh,Software Signing', + '443,6,500,Signal Helper (Renderer),org.whispersystems.signal-desktop.helper.Renderer,Developer ID Application: Quiet Riddle Ventures LLC (U68MSDN6DR)', '53,17,500,docker-credential-gcr,a.out,', '53,17,500,trivy,,', '6000,6,500,ssh,,',