RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-16 17:37:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add exception for wrapped Firefox talking to port 19305 (Hangouts)

Browse Source
This commit is contained in:
Thomas Stromberg 2023-01-27 10:41:55 -05:00
parent 141ab28310
commit 5621d9ecd1
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/c2/unexpected-talkers-linux.sql
View File

@ -92,6 +92,7 @@ WHERE
'143,6,500,/usr/thunderbird,0u,0g,thunderbird',
'19305,6,500,/opt/firefox,0u,0g,firefox',
'19305,6,500,/usr/firefox,0u,0g,firefox',
'19305,6,500,/usr/firefox,0u,0g,.firefox-wrappe',
'22000,6,500,/usr/syncthing,0u,0g,syncthing',
'22,6,0,/usr/ssh,0u,0g,ssh',
'22,6,0,/usr/tailscaled,0u,0g,tailscaled',