RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-10 07:39:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow gcloud auth application-default login

Browse Source
This commit is contained in:
Thomas Stromberg 2022-12-15 09:12:30 -05:00
parent 685a79d3e1
commit 47b208eb71
Failed to extract signature
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
detection/execution/unexpected-osascript-calls.sql
View File

@ -63,7 +63,7 @@ WHERE
)
AND NOT (
parent_cmd LIKE '%/google-cloud-sdk/lib/gcloud.py auth login'
OR parent_cmd LIKE '%/bin/gcloud auth login'
OR parent_cmd LIKE '%/bin/gcloud auth%login'
)
AND NOT (
exception_key = ',,osascript -s se -l JavaScript'