RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-04-01 22:48:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add exception for Tailscale MagicDNS

Browse Source
This commit is contained in:
Thomas Stromberg 2022-11-04 11:52:39 -04:00
parent 8931530901
commit 8f873cfd85
Failed to extract signature
1 changed files with 1 additions and 0 deletions

1
detection/c2/unexpected-dns-traffic-events.sql
View File

@ -57,6 +57,7 @@ WHERE
) )
-- Some applications hard-code a safe DNS resolver, or allow the user to configure one -- Some applications hard-code a safe DNS resolver, or allow the user to configure one
AND s.remote_address NOT IN ( AND s.remote_address NOT IN (
'100.100.100.100', -- Tailscale Magic DNS
'1.1.1.1', -- Cloudflare '1.1.1.1', -- Cloudflare
'1.1.1.2', -- Cloudflare '1.1.1.2', -- Cloudflare
'8.8.8.8', -- Google '8.8.8.8', -- Google