RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-20 12:06:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

More osquery matches

Browse Source 
Signed-off-by: Ian Brown <ian@zestysoft.com>
This commit is contained in:
Ian Brown 2023-02-19 11:24:54 -08:00
parent 96e95a7f37
commit 91f653262c
No known key found for this signature in database
GPG Key ID: D9923DD6508A15B9
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/collection/high-disk-bytes-written.sql
View File

@ -160,3 +160,4 @@ WHERE
AND p.path NOT LIKE '/nix/store/%kolide-launcher-%/bin/launcher'
AND NOT cmdline LIKE '%/lib/gcloud.py components update'
AND NOT cgroup_path LIKE '/system.slice/docker-%'
AND NOT p.path = '/opt/osquery/lib/osquery.app/Contents/MacOS/osqueryd'