From 504ef2c8ddde891596281f2d12337b63ae55c6ea Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Fri, 17 Feb 2023 12:03:36 -0500 Subject: [PATCH] gcloud: filter out last_update_check, last_survey_prompt --- detection/evasion/unexpected-hidden-system-paths.sql | 2 ++ 1 file changed, 2 insertions(+) diff --git a/detection/evasion/unexpected-hidden-system-paths.sql b/detection/evasion/unexpected-hidden-system-paths.sql index 0a9eb33..c1900ca 100644 --- a/detection/evasion/unexpected-hidden-system-paths.sql +++ b/detection/evasion/unexpected-hidden-system-paths.sql @@ -79,6 +79,8 @@ WHERE '/tmp/.ICE-unix/', '/tmp/.terraform/', '/tmp/.terraform.lock.hcl', + '/tmp/.last_update_check.json', + '/tmp/.last_survey_prompt.yaml', '/tmp/.Test-unix/', '/tmp/.vbox-t-ipc/', '/tmp/.X0-lock',