RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add elastic-endpoint 

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
This commit is contained in:
egibs 2024-11-20 14:02:05 -06:00
parent a24c3d2333
commit 78ec36eca0
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/evasion/touched-executable-linux.sql
View File

@ -57,5 +57,6 @@ WHERE
AND f.path NOT LIKE '%/go/bin/%' AND f.path NOT LIKE '%/go/bin/%'
AND f.path NOT LIKE '%/osqueryi' AND f.path NOT LIKE '%/osqueryi'
AND f.path NOT LIKE '/tmp/%/.terraform/providers/%' AND f.path NOT LIKE '/tmp/%/.terraform/providers/%'
AND f.path NOT LIKE '/var/opt/Elastic/Endpoint/elastic-endpoint'
GROUP by GROUP by
p.pid p.pid