diff --git a/detection/collection/high-disk-bytes-written.sql b/detection/collection/high-disk-bytes-written.sql index 8854262..eeeca77 100644 --- a/detection/collection/high-disk-bytes-written.sql +++ b/detection/collection/high-disk-bytes-written.sql @@ -47,6 +47,7 @@ WHERE '/usr/bin/zsh', '/usr/lib64/thunderbird/thunderbird', '/usr/libexec/coreduetd', + '/usr/libexec/flatpak-system-helper', '/usr/libexec/packagekitd', '/usr/libexec/rosetta/oahd', '/usr/libexec/secd',