RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-02-20 03:36:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

https client: Add cargo running from homedir

Browse Source
This commit is contained in:
Thomas Stromberg 2022-11-10 12:26:38 -05:00
parent 875caaf64e
commit f7237c3641
Failed to extract signature
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
detection/c2/unexpected-https-client-linux.sql
View File

@ -106,6 +106,7 @@ WHERE
'500,/opt/Discord,0u,0g,Discord',
'500,/opt/firefox,0u,0g,firefox',
'500,/opt/firefox,0u,0g,Socket Process',
'500,/home/cargo,500u,500g,cargo',
'500,/opt/kubectl,0u,0g,kubectl',
'500,/opt/slack,0u,0g,slack',
'500,/opt/snap-store,0u,0g,snap-store',