From 9d93799cb513b0f63627e18d03ce3acb2cb62667 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Wed, 5 Jul 2023 12:47:00 -0400 Subject: [PATCH] Add 'management' to the list of permissions to check for --- detection/persistence/unexpected-chrome-extensions.sql | 1 + 1 file changed, 1 insertion(+) diff --git a/detection/persistence/unexpected-chrome-extensions.sql b/detection/persistence/unexpected-chrome-extensions.sql index 944af5a..3d1bd34 100644 --- a/detection/persistence/unexpected-chrome-extensions.sql +++ b/detection/persistence/unexpected-chrome-extensions.sql @@ -63,6 +63,7 @@ WHERE state = 1 OR perms LIKE "%nativeMessaging%" OR perms LIKE "%proxy%" OR perms LIKE "%webAuthenticationProxy%" + OR perms LIKE "%management%" ) ) AND NOT exception_key IN (