Add exception for wrapped Firefox talking to port 19305 (Hangouts)

2023-01-27 10:41:55 -05:00 · 2023-01-27 10:41:55 -05:00 · 5621d9ecd1
parent 141ab28310
commit 5621d9ecd1
1 changed files with 1 additions and 0 deletions
--- a/detection/c2/unexpected-talkers-linux.sql
+++ b/detection/c2/unexpected-talkers-linux.sql
@ -92,6 +92,7 @@ WHERE
    '143,6,500,/usr/thunderbird,0u,0g,thunderbird',
    '19305,6,500,/opt/firefox,0u,0g,firefox',
    '19305,6,500,/usr/firefox,0u,0g,firefox',
+    '19305,6,500,/usr/firefox,0u,0g,.firefox-wrappe',
    '22000,6,500,/usr/syncthing,0u,0g,syncthing',
    '22,6,0,/usr/ssh,0u,0g,ssh',
    '22,6,0,/usr/tailscaled,0u,0g,tailscaled',