RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2024-12-15 02:24:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #241 from tstromberg/fpr-apr14

Browse Source 
systemd: Filter out targets, add more entries
This commit is contained in:
Thomas Strömberg 2023-04-27 11:59:33 -04:00 committed by GitHub
commit 8017adf36a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/persistence/unexpected-systemctl-calls-linux.sql
View File

@ -71,6 +71,7 @@ WHERE
AND NOT exception_key IN (
'systemctl,0,apt-helper,',
'systemctl,0,,containerd-shim-runc-v2',
'systemctl,0,kubeadm,containerd-shim-runc-v2',
'systemctl,0,dash,logrotate',
'systemctl,0,pacman,pacman',
'systemctl,500,zsh,tmux',