diff --git a/detection/execution/unexpected-execdir-events-macos.sql b/detection/execution/unexpected-execdir-events-macos.sql index ba5e4ea..3001e74 100644 --- a/detection/execution/unexpected-execdir-events-macos.sql +++ b/detection/execution/unexpected-execdir-events-macos.sql @@ -150,8 +150,8 @@ WHERE '/usr/local/Cellar', '/usr/local/kolide-k2', '/Volumes/Google Chrome/Google Chrome.app', - '/Volumes/Slack/Slack.app' - '~/.wdm/drivers/chromedriver', + '/Volumes/Slack/Slack.app', + '~/.wdm/drivers/chromedriver' ) AND dir NOT IN ( '/bin',