diff --git a/detection/c2/unexpected-talkers-linux.sql b/detection/c2/unexpected-talkers-linux.sql index e5b5599..d63bffa 100644 --- a/detection/c2/unexpected-talkers-linux.sql +++ b/detection/c2/unexpected-talkers-linux.sql @@ -83,6 +83,7 @@ WHERE protocol > 0 ) AND NOT exception_key IN ( '123,17,500,chronyd,0u,0g,chronyd', + '19305,6,500,msedge,0u,0g,msedge', '4070,6,500,spotify,u,g,spotify', '49152,6,500,ContinuityCaptureAgent,Software Signing', '587,6,500,perl,0u,0g,git-send-email',