RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

swap extra tag between udev and systemd

This commit is contained in:
Thomas Stromberg 2024-09-23 11:24:03 -04:00
parent 5255539777
commit d14d5429e8
Failed to extract signature
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
detection/persistence/suspicious-systemd-unit.sql
View File

@ -8,7 +8,7 @@
-- false positives: -- false positives:
-- * home-made systemd files -- * home-made systemd files
-- --
-- tags: persistent filesystem systemd -- tags: persistent filesystem systemd extra
-- platform: linux -- platform: linux
SELECT SELECT
file.path, file.path,

2
detection/persistence/suspicious-udev-runner-linux.sql
View File

@ -4,7 +4,7 @@
-- * https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp -- * https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp
-- * https://ch4ik0.github.io/en/posts/leveraging-Linux-udev-for-persistence/ -- * https://ch4ik0.github.io/en/posts/leveraging-Linux-udev-for-persistence/
-- --
-- tags: volume filesystem extra -- tags: volume filesystem
-- platform: linux -- platform: linux
SELECT SELECT
file.path, file.path,