netutil calls: add nscurl

2023-07-12 16:45:09 -04:00 · 2023-07-12 16:45:09 -04:00 · 8e73ef70d2
parent bb5f597b2a
commit 8e73ef70d2
1 changed files with 1 additions and 0 deletions
--- a/detection/discovery/unexpected-netutil-calls-macos.sql
+++ b/detection/discovery/unexpected-netutil-calls-macos.sql
@ -77,6 +77,7 @@ WHERE
  pe.path IN (
    '/sbin/ifconfig',
    '/usr/sbin/netstat',
+    '/usr/bin/nscurl',
    '/sbin/pfctl',
    '/usr/libexec/ApplicationFirewall/socketfilterfw'
  )