diff --git a/detection/execution/unexpected-setuid-binaries.sql b/detection/execution/unexpected-setuid-binaries.sql index 8819ccb..94f4c46 100644 --- a/detection/execution/unexpected-setuid-binaries.sql +++ b/detection/execution/unexpected-setuid-binaries.sql @@ -173,7 +173,6 @@ FROM '/sbin/crontab', '/sbin/usernetctl', '/usr/sbin/usernetctl', - '/sbin/expiry', '/sbin/fusermount', '/sbin/fusermount3',