RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #295 from tstromberg/process-ext 

netutil calls: add nscurl
This commit is contained in:
Thomas Strömberg 2023-07-12 16:45:49 -04:00 committed by GitHub
parent edbe3fa1f6 8e73ef70d2
commit 6182f2957e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/discovery/unexpected-netutil-calls-macos.sql
View File

@ -77,6 +77,7 @@ WHERE
pe.path IN ( pe.path IN (
'/sbin/ifconfig', '/sbin/ifconfig',
'/usr/sbin/netstat', '/usr/sbin/netstat',
'/usr/bin/nscurl',
'/sbin/pfctl', '/sbin/pfctl',
'/usr/libexec/ApplicationFirewall/socketfilterfw' '/usr/libexec/ApplicationFirewall/socketfilterfw'
) )