Ignore JSON files

2025-01-25 06:42:56 +00:00 · 2022-11-03 14:24:53 -04:00 · 2022-11-03 14:24:53 -04:00 · dbbe319d72
commit dbbe319d72
parent baa38a5efb
1 changed files with 1 additions and 0 deletions
--- a/detection/evasion/unexpected-var-executables-linux.sql
+++ b/detection/evasion/unexpected-var-executables-linux.sql
@ -50,4 +50,5 @@ WHERE
    '/var/run/booted-system',
    '/var/run/current-system'
  )
+  AND magic.data NOT IN ('JSON data')
  AND file.size > 10