RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Arc browser talker exception 

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
This commit is contained in:
egibs 2024-10-29 16:33:58 -05:00
parent b47bc10f2e
commit 7b1e152266
Failed to extract signature
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
detection/c2/unexpected-talkers-macos.sql
View File

@ -95,7 +95,8 @@ WHERE pos.pid IN (
'500,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)', '500,Developer ID Application: Zoom Video Communications, Inc. (BJ4HAAB9B3)',
'500,Developer ID Application: Cisco (DE8Y96K9QP)', '500,Developer ID Application: Cisco (DE8Y96K9QP)',
'500,Developer ID Application: Google LLC (EQHXZ8M8AV)', '500,Developer ID Application: Google LLC (EQHXZ8M8AV)',
'500,Developer ID Application: Valve Corporation (MXGJJ98X76)' '500,Developer ID Application: Valve Corporation (MXGJJ98X76)',
'500,Developer ID Application: The Browser Company of New York Inc. (S6N382Y83G)'
) )
AND NOT ( AND NOT (
unsigned_exception = '500,6,80,main,main' unsigned_exception = '500,6,80,main,main'