From 3a4e0450a6c18023e384a70a51a0826629d27c5f Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Mon, 20 Feb 2023 19:11:23 -0500 Subject: [PATCH] Uncomment remaining columns --- .../persistence/unexpected-active-systemd-units.sql | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/detection/persistence/unexpected-active-systemd-units.sql b/detection/persistence/unexpected-active-systemd-units.sql index a68da66..175131e 100644 --- a/detection/persistence/unexpected-active-systemd-units.sql +++ b/detection/persistence/unexpected-active-systemd-units.sql @@ -9,12 +9,12 @@ -- tags: persistent seldom filesystem systemd -- platform: linux SELECT -- description AS 'desc', - -- fragment_path AS path, - -- MAX(user, "root") AS effective_user, - -- following, - -- hash.sha256, - -- file.ctime, - -- file.size, + fragment_path AS path, + MAX(user, "root") AS effective_user, + following, + hash.sha256, + file.ctime, + file.size, CONCAT ( id, ',',