RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2024-12-14 10:04:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #31 from tstromberg/talkers-ff

Browse Source 
Add exception for firefox-wrapper on port 80
This commit is contained in:
Thomas Strömberg 2022-10-24 11:11:13 -04:00 committed by GitHub
commit 50f4c3d452
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/c2/unexpected-talkers-linux.sql
View File

@ -95,6 +95,7 @@ WHERE
'80,6,0,/usr/applydeltarpm,0u,0g,applydeltarpm',
'8000,6,500,/usr/firefox,0u,0g,firefox',
'80,6,0,/usr/NetworkManager,0u,0g,NetworkManager',
'80,6,500,/usr/firefox,0u,0g,.firefox-wrappe',
'80,6,0,/usr/tailscaled,0u,0g,tailscaled',
'80,6,0,/usr/.tailscaled-wrapped,0u,0g,.tailscaled-wra',
'80,6,500,/app/thunderbird,u,g,thunderbird',