diff --git a/detection/persistence/unexpected-chrome-extensions.sql b/detection/persistence/unexpected-chrome-extensions.sql index 944af5a..3d1bd34 100644 --- a/detection/persistence/unexpected-chrome-extensions.sql +++ b/detection/persistence/unexpected-chrome-extensions.sql @@ -63,6 +63,7 @@ WHERE state = 1 OR perms LIKE "%nativeMessaging%" OR perms LIKE "%proxy%" OR perms LIKE "%webAuthenticationProxy%" + OR perms LIKE "%management%" ) ) AND NOT exception_key IN (