RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-20 20:16:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Be more leniant with lack-of-info filter

Browse Source
This commit is contained in:
Thomas Stromberg 2022-09-29 12:29:55 -04:00
parent 21aa79b2e0
commit 962b012e2c
Failed to extract signature
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
process/missing-from-disk-macos.sql
View File

@ -31,10 +31,7 @@ WHERE
AND p.state != "Z"
-- The kernel no longer has enough tracking information for this alert to be useful
AND NOT (
p.parent = 1
AND p.path = ""
AND p.cwd = ""
AND p.name = ""
p.parent = 1 AND p.path = ""
)
AND NOT (
p.gid = 20