RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-05 21:09:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

linux talkers: Add ssh exception

Browse Source
This commit is contained in:
Thomas Stromberg 2022-10-20 13:46:55 -04:00
parent 8ddc3de482
commit 6624c8c620
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/c2/unexpected-talkers-linux.sql
View File

@ -82,6 +82,7 @@ WHERE
AND NOT exception_key IN (
'123,17,500,/usr/chronyd,0u,0g,chronyd',
'22000,6,500,/usr/syncthing,0u,0g,syncthing',
'22,6,500,/usr/ssh,0u,0g,ssh',
'4070,6,500,/opt/spotify,0u,0g,spotify',
'5228,6,500,/opt/chrome,0u,0g,chrome',
'5228,6,500,/usr/chrome,0u,0g,chrome', -- Android Market/GCM