diff --git a/detection/evasion/unexpected-hidden-system-paths.sql b/detection/evasion/unexpected-hidden-system-paths.sql
index 0a9eb33..c1900ca 100644
--- a/detection/evasion/unexpected-hidden-system-paths.sql
+++ b/detection/evasion/unexpected-hidden-system-paths.sql
@@ -79,6 +79,8 @@ WHERE
     '/tmp/.ICE-unix/',
     '/tmp/.terraform/',
     '/tmp/.terraform.lock.hcl',
+    '/tmp/.last_update_check.json',
+    '/tmp/.last_survey_prompt.yaml',
     '/tmp/.Test-unix/',
     '/tmp/.vbox-t-ipc/',
     '/tmp/.X0-lock',