diff --git a/detection/evasion/unexpected-library-entries-macos.sql b/detection/evasion/unexpected-library-entries-macos.sql
index 503c3fd..d2d870e 100644
--- a/detection/evasion/unexpected-library-entries-macos.sql
+++ b/detection/evasion/unexpected-library-entries-macos.sql
@@ -46,6 +46,7 @@ WHERE
     '/Library/ColorSync/',
     '/Library/Components/',
     '/Library/Compositions/',
+    '/Library/DropboxHelperTools/',
     '/Library/Compositions/.localized',
     '/Library/Contextual Menu Items/',
     '/Library/CoreAnalytics/',