RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-16 01:17:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add exception for local kubectl binary

Browse Source
This commit is contained in:
Thomas Stromberg 2022-10-20 13:15:26 -04:00
parent 8e1569164a
commit 9373952f18
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/evasion/touched-executable-macos.sql
View File

@ -84,6 +84,7 @@ WHERE
OR p.path LIKE '/Users/%/Library/Application Support/com.elgato.StreamDeck/Plugins/%'
OR p.path LIKE '/Applications/%.app/Contents/MacOS/%'
OR p.path LIKE '/opt/homebrew/Cellar/%/bin/%'
OR p.path LIKE '/Users/%/google-cloud-sdk/bin/kubectl'
OR p.path LIKE '/nix/store/%'
)
)