RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-09 22:16:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Uncomment remaining columns

Browse Source
This commit is contained in:
Thomas Stromberg 2023-02-20 19:11:23 -05:00
parent d3780c0a6c
commit 3a4e0450a6
Failed to extract signature
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
detection/persistence/unexpected-active-systemd-units.sql
View File

@ -9,12 +9,12 @@
-- tags: persistent seldom filesystem systemd
-- platform: linux
SELECT -- description AS 'desc',
-- fragment_path AS path,
-- MAX(user, "root") AS effective_user,
-- following,
-- hash.sha256,
-- file.ctime,
-- file.size,
fragment_path AS path,
MAX(user, "root") AS effective_user,
following,
hash.sha256,
file.ctime,
file.size,
CONCAT (
id,
',',