RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-10 14:37:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix hash JOIN table name

Browse Source
This commit is contained in:
Thomas Stromberg 2022-10-21 17:39:01 -04:00
parent 3a944b2af8
commit 878f6e1b71
Failed to extract signature
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
detection/execution/exotic-command-events-linux.sql
View File

@ -35,7 +35,7 @@ FROM
process_events p
LEFT JOIN processes pp ON p.parent = pp.pid
LEFT JOIN hash ON p.path = hash.path
LEFT JOIN hash AS phash ON pp.path = hash.path
LEFT JOIN hash AS phash ON pp.path = phash.path
WHERE
p.time > (strftime('%s', 'now') -60)
AND (