From 44babb928822f4c2624805ae62813620a29176e0 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Fri, 4 Nov 2022 08:05:59 -0400 Subject: [PATCH] Add exception for ko from a home directory --- detection/c2/unexpected-https-client-linux.sql | 1 + 1 file changed, 1 insertion(+) diff --git a/detection/c2/unexpected-https-client-linux.sql b/detection/c2/unexpected-https-client-linux.sql index efeb1c0..ef2b742 100644 --- a/detection/c2/unexpected-https-client-linux.sql +++ b/detection/c2/unexpected-https-client-linux.sql @@ -89,6 +89,7 @@ WHERE '500,/home/chainctl,500u,500g,chainctl', '500,/home/code,500u,500g,code', '500,/home/gitsign,500u,500g,gitsign', + '500,/home/ko,500u,500g,ko', '500,/home/go,500u,500g,go', '500,/home/grype,500u,500g,grype', '500,/home/java,500u,500g,java',