Add exception for ko from a home directory

2022-11-04 08:05:59 -04:00 · 2022-11-04 08:05:59 -04:00 · 44babb9288
parent a8c020ff30
commit 44babb9288
1 changed files with 1 additions and 0 deletions
--- a/detection/c2/unexpected-https-client-linux.sql
+++ b/detection/c2/unexpected-https-client-linux.sql
@ -89,6 +89,7 @@ WHERE
    '500,/home/chainctl,500u,500g,chainctl',
    '500,/home/code,500u,500g,code',
    '500,/home/gitsign,500u,500g,gitsign',
+    '500,/home/ko,500u,500g,ko',
    '500,/home/go,500u,500g,go',
    '500,/home/grype,500u,500g,grype',
    '500,/home/java,500u,500g,java',