RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-22 05:12:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #296 from tstromberg/process-ext

Browse Source 
Add rustbucket comment
This commit is contained in:
Thomas Strömberg 2023-07-12 16:46:24 -04:00 committed by GitHub
commit 656df2055e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
detection/evasion/unexpected-user-executables-macos.sql
View File

@ -2,6 +2,8 @@
--
-- references:
-- * https://www.elastic.co/security-labs/inital-research-of-jokerspy
-- * https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket
--
-- false positives:
-- * none known
--