diff --git a/detection/execution/recently-created-executables-linux.sql b/detection/execution/recently-created-executables-linux.sql index 636de25..e6afe58 100644 --- a/detection/execution/recently-created-executables-linux.sql +++ b/detection/execution/recently-created-executables-linux.sql @@ -171,6 +171,7 @@ WHERE AND NOT p.path LIKE '/home/%/.local/share/JetBrains/Toolbox/apps/%' AND NOT p.path LIKE '/home/%/.local/share/nvim/mason/packages/%' AND NOT p.path LIKE '/home/%/.local/share/Steam/ubuntu12_64/%' + AND NOT p.path LIKE '/home/%/.rustup/toolchains/%/libexec/%' AND NOT p.path LIKE '/home/%/node_modules/.bin/%' AND NOT p.path LIKE '/home/%/Projects/%' AND NOT p.path LIKE '/home/%/terraform-provider-%'