RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

netutil calls: add nscurl

This commit is contained in:
Thomas Stromberg 2023-07-12 16:45:09 -04:00
parent bb5f597b2a
commit 8e73ef70d2
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/discovery/unexpected-netutil-calls-macos.sql
View File

@ -77,6 +77,7 @@ WHERE
pe.path IN ( pe.path IN (
'/sbin/ifconfig', '/sbin/ifconfig',
'/usr/sbin/netstat', '/usr/sbin/netstat',
'/usr/bin/nscurl',
'/sbin/pfctl', '/sbin/pfctl',
'/usr/libexec/ApplicationFirewall/socketfilterfw' '/usr/libexec/ApplicationFirewall/socketfilterfw'
) )