From e13773d9b78c770764d093365e74d6cce8fda5eb Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Fri, 20 Jan 2023 09:08:45 -0500 Subject: [PATCH] Add fish & bash to parent missing disk exclusions --- detection/evasion/parent-missing-from-disk-linux.sql | 2 ++ 1 file changed, 2 insertions(+) diff --git a/detection/evasion/parent-missing-from-disk-linux.sql b/detection/evasion/parent-missing-from-disk-linux.sql index dffdebc..d7aef21 100644 --- a/detection/evasion/parent-missing-from-disk-linux.sql +++ b/detection/evasion/parent-missing-from-disk-linux.sql @@ -55,6 +55,8 @@ WHERE 'lightdm', 'nvim', 'gnome-shell', + 'fish', + 'bash', 'slack', 'kube-proxy', 'kubelet'