RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-10 07:39:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add exception for /private/tmp go-build

Browse Source
This commit is contained in:
Thomas Stromberg 2022-09-26 18:05:23 -04:00
parent b1c21d4497
commit b1dd6b7cad
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
process/unexpected-executable-directory.sql
View File

@ -67,6 +67,7 @@ WHERE
AND dirname NOT LIKE '/private/var/folders/%/bin'
AND dirname NOT LIKE '/private/var/folders/%/Contents/%'
AND dirname NOT LIKE '/private/var/folders/%/go-build%'
AND dirname NOT LIKE '/private/tmp/go-build%/exe'
AND dirname NOT LIKE '/private/var/folders/%/GoLand'
AND dirname NOT LIKE '/snap/%'
AND dirname NOT LIKE '/System/%'