RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Don't mind shells hanging out in ~/.Trash

This commit is contained in:
Thomas Stromberg 2022-10-18 14:51:51 -04:00
parent 7483c845f4
commit 9f06873ae9
Failed to extract signature
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
detection/evasion/hidden-cwd.sql
View File

@ -51,6 +51,9 @@ WHERE
'fish,~/.local/share', 'fish,~/.local/share',
'git,~/.local/share', 'git,~/.local/share',
'makepkg,~/.cache/yay', 'makepkg,~/.cache/yay',
'zsh,~/.Trash',
'bash,~/.Trash',
'fish,~/.Trash',
'make,~/.cache/yay', 'make,~/.cache/yay',
'java,~/.gradle/daemon', 'java,~/.gradle/daemon',
'java,~/.local/share', 'java,~/.local/share',