RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #94 from tstromberg/makefile-fixes 

Add IR no-wifi ruleset
This commit is contained in:
Thomas Strömberg 2022-11-23 07:33:39 -05:00 committed by GitHub
parent f99109d962 09962c8dca
commit 7e038c7e2a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Makefile
View File

@ -8,10 +8,14 @@ out/odk-detection.conf: out/osqtool
out/odk-policy.conf: out/osqtool
./out/osqtool --verify pack policy/ > out/odk-policy.conf
out/odk-incident_response.conf: out/osqtool
./out/osqtool --max-duration=8s --verify pack incident_response/ > out/odk-incident_response.conf
out/odk-incident-response.conf: out/osqtool
./out/osqtool --max-duration=8s --verify pack incident_response/ > out/odk-incident-response.conf
packs: out/odk-detection.conf out/odk-policy.conf out/odk-incident_response.conf
# An alternative rules file for configurations where the "wireless_networks" table is forbidden for querying
out/odk-incident-response-no-wifi.conf: out/osqtool
./out/osqtool --max-duration=8s --verify --exclude wireless_networks_macos pack incident_response/ > out/odk-incident-response-no-wifi.conf
packs: out/odk-detection.conf out/odk-policy.conf out/odk-incident-response.conf out/odk-incident-response-no-wifi.conf
out/odk-packs.zip: packs
cd out && zip odk-packs.zip *.conf