From 8e73ef70d2d11dfc9dd3c8cae3009330a02cb45b Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Wed, 12 Jul 2023 16:45:09 -0400 Subject: [PATCH] netutil calls: add nscurl --- detection/discovery/unexpected-netutil-calls-macos.sql | 1 + 1 file changed, 1 insertion(+) diff --git a/detection/discovery/unexpected-netutil-calls-macos.sql b/detection/discovery/unexpected-netutil-calls-macos.sql index 70ceb64..b7ca810 100644 --- a/detection/discovery/unexpected-netutil-calls-macos.sql +++ b/detection/discovery/unexpected-netutil-calls-macos.sql @@ -77,6 +77,7 @@ WHERE pe.path IN ( '/sbin/ifconfig', '/usr/sbin/netstat', + '/usr/bin/nscurl', '/sbin/pfctl', '/usr/libexec/ApplicationFirewall/socketfilterfw' )