From d7937aa532d88bd857454b400e96a1f67c67251f Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Wed, 3 May 2023 16:56:15 -0400 Subject: [PATCH] Fix trailing comma --- detection/evasion/name_path_mismatch.sql | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/detection/evasion/name_path_mismatch.sql b/detection/evasion/name_path_mismatch.sql index 8cb2a6e..e01437f 100644 --- a/detection/evasion/name_path_mismatch.sql +++ b/detection/evasion/name_path_mismatch.sql @@ -99,8 +99,8 @@ WHERE '500,rootlesskit,exe', '500,rootlessport,exe', '500,systemd,(sd-pam)', - '500,udevadm,systemd-udevd' - '500,vim.basic,vi', + '500,udevadm,systemd-udevd', + '500,vim.basic,vi' ) AND NOT p0.path IN ('/usr/lib/systemd/systemd') GROUP by