RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-17 09:57:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add osquery to keyboard_sniffer

Browse Source 
Signed-off-by: Ian Brown <ian@zestysoft.com>
This commit is contained in:
Ian Brown 2023-02-21 22:07:08 -08:00
parent eeb8792ee8
commit 737eb93b48
No known key found for this signature in database
GPG Key ID: D9923DD6508A15B9
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
detection/credentials/macos_keyboard_sniffer.sql
View File

@ -68,7 +68,8 @@ WHERE
'MonitorControl,me.guillaumeb.MonitorControl,Developer ID Application: Joni Van Roost (CYC8C8R4K9)',
'Rocket,net.matthewpalmer.Rocket,Developer ID Application: Matthew Palmer (Z4JV2M65MH)',
'skhd,skhd,',
'TextExpander,com.smileonmymac.textexpander,Developer ID Application: SmileOnMyMac, LLC (7PKJ6G4DXL)'
'TextExpander,com.smileonmymac.textexpander,Developer ID Application: SmileOnMyMac, LLC (7PKJ6G4DXL)',
'osqueryd,io.osquery.agent,Developer ID Application: OSQUERY A Series of LF Projects, LLC (3522FA9PXF)'
)
GROUP BY
p0.path