RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2024-12-17 19:44:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #376 from tstromberg/fpr-jul13

Browse Source 
Add Mailvelope and SABconnect, sort Chrome extensions
This commit is contained in:
Thomas Strömberg 2024-07-23 11:17:12 -04:00 committed by GitHub
commit bf9c1e007f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
detection/persistence/unexpected-chrome-extensions.sql
View File

@ -89,6 +89,7 @@ WHERE
'true,Alexander Shutau,Dark Reader,eimadpbcbfnmbkopoojfekhnkhdbieeh',
'true,All uBlock contributors,uBlock - free ad blocker,epcnnfbjfcgphgdmggkamkmgojdagdnn',
'true,,Application Launcher For Drive (by Google),lmjegmlicamnimmfhcmpkclmigmmcbeh',
'true,,Apps Launcher for Chrome,hdmhnhkegdfpajaeijlfopfoallfdiak',
'true,,Awesome ChatGPT Screenshot & Screen Recorder,nlipoenfbbikpbjkfpfillcgkoblgpmj',
'true,,Awesome Screen Recorder & Screenshot,nlipoenfbbikpbjkfpfillcgkoblgpmj',
'true,,axe DevTools - Web Accessibility Testing,lhdoppojpmngadmnindnejefpokejbdd',
@ -100,6 +101,7 @@ WHERE
'true,Bitwarden Inc.,Bitwarden - Free Password Manager,nngceckbapebfimnlniiiahkandclblb',
'true,Bitwarden Inc.,Bitwarden Password Manager,nngceckbapebfimnlniiiahkandclblb',
'true,,BlockSite: Block Websites & Stay Focused,eiimnmioipafcokbfikbljfdeojpcgbh',
'true,,Boomerang for Gmail,mdanidgdpmkimeiiojknlnekblgmpdll',
'true,,Browsec VPN - Free VPN for Chrome,omghfjlpggmjjaagoclmmobgdodcjboh',
'true,,BrowserStack Local,mfiddfehmfdojjfdpfngagldgaaafcfo',
'true,CAD Team,Cookie AutoDelete,fhcgjolkccmbidfldomjliifgaodjagh',
@ -221,6 +223,7 @@ WHERE
'true,,Loom – Free Screen Recorder & Screen Capture,liecbddmkiiihnedobmlmillhodjkdmb',
'true,,Loom – Screen Recorder & Screen Capture,liecbddmkiiihnedobmlmillhodjkdmb',
'true,,Lucidchart Diagrams,apboafhkiegglekeafbckfjldecefkhn',
'true,,Mailvelope,kajibbejlbohfaggdiogboambcijhkke',
'true,,Markdown Preview Plus,febilkbfcbhebfnokafefeacimjdckgl',
'true,Marker.io,Marker.io: Visual bug reporting for websites,jofhoojcehdmaiibilpcoofpdbbddkkl',
'true,,Media Hint,akipcefbjlmpbcejgdaopmmidpnjlhnb',
@ -269,6 +272,7 @@ WHERE
'true,,RetailMeNot Deal Finder™️,jjfblogammkiefalfpafidabbnamoknm',
'true,,RSS Feed Reader,pnjaodmkngahhkoihejjehlcdlnohgmp',
'true,,RSS Subscription Extension (by Google),nlbjncdgjeocebhnmkbbbdekmmmcbfjd',
'true,,SABconnect++,okphadhbbjadcifjplhifajfacbkkbod',
'true,,Salesforce,jjghhkepijgakdammjldcbnjehfkfmha',
'true,,SalesLoft Connect,cffgjgigjfgjkfdopbobbdadaelbhepo',
'true,,SalesLoft Connect - Legacy,cffgjgigjfgjkfdopbobbdadaelbhepo',
@ -302,6 +306,7 @@ WHERE
'true,,Tampermonkey BETA,gcalenpjmijncebpfijmoaglllgpjagf',
'true,Team Octotree,Octotree - GitHub code tree,bkhaagjahfmjljalopjnoealnfndnagc',
'true,,The Marvellous Suspender,noogafoofpebimajpfpamcfhoaifemoa',
'true,,The Org for LinkedIn,gnkbmaifcbniminbmbmiabamggncacag',
'true,Thomas Rientjes,Decentraleyes,ldpochfccmkkmhdbclfhpagapcfdljkj',
'true,,TickTick - Todo & Task List,diankknpkndanachmlckaikddgcehkod',
'true,,Todoist for Chrome,jldhpllghnbhlbpcmnajkpdmadaolakh',
@ -315,14 +320,11 @@ WHERE
'true,,Universal Video Downloader,cogmkaeijeflocngklepoknelfjpdjng',
'true,,User-Agent Switcher for Chrome,djflhoibgkdhkhhcedjiklpkjnoahfmg',
'true,,Utime,kpcibgnngaaabebmcabmkocdokepdaki',
'true,,The Org for LinkedIn,gnkbmaifcbniminbmbmiabamggncacag',
'true,,Apps Launcher for Chrome,hdmhnhkegdfpajaeijlfopfoallfdiak',
'true,,Boomerang for Gmail,mdanidgdpmkimeiiojknlnekblgmpdll',
'true,,Vidyard - Webcam & Screen Recorder for Sales,jiihcciniecimeajcniapbngjjbonjan',
'true,,VidyoWebConnector,mmedphfiemffkinodeemalghecnicmnh',
'true,,Vimcal,akopimcimmdmklcmegcflfidpfegngke',
'true,Vimeo,Vimeo Record - Screen & Webcam Recorder,ejfmffkmeigkphomnpabpdabfddeadcb',
'true,,Vimeo Record - Screen & Webcam Recorder,ejfmffkmeigkphomnpabpdabfddeadcb',
'true,Vimeo,Vimeo Record - Screen & Webcam Recorder,ejfmffkmeigkphomnpabpdabfddeadcb',
'true,,Vimium,dbepggeogbaibhgnhhndojpepiihcmeb',
'true,,Vue.js devtools,nhdogjmejiglipccpnnnanhbledajbpd',
'true,Wappalyzer,Wappalyzer - Technology profiler,gppongmhjkpfnbhagpmjfkannfbllamg',