Commit Graph

25 Commits

Author SHA1 Message Date
Thomas Stromberg 49f2d5a579
Add detectors for unexpected executables in strange places 2022-09-29 11:38:14 -04:00
Thomas Stromberg 5b7858e3cf
More false-positive removal 2022-09-27 11:54:17 -04:00
Thomas Stromberg 318d26602f
Remove numerous false positives 2022-09-26 18:27:43 -04:00
Thomas Stromberg 8b622cc77e
Format everything with 'npx sql-formatter -l sqlite' 2022-09-24 11:12:23 -04:00
Thomas Stromberg 7a1a4972d7
Weekend false-positive removal 2022-09-24 11:07:34 -04:00
Thomas Stromberg a91c9720f3
More false-positive removal 2022-09-23 13:03:11 -04:00
Thomas Stromberg c9dfaa8376
Add unexpected volume contents (experimental) 2022-09-23 10:36:11 -04:00
Thomas Stromberg 481581c616
Launch day final cleanup 2022-09-22 19:35:24 -04:00
Thomas Stromberg 37eca56cb5
More whitelisting 2022-09-22 05:18:03 -04:00
Thomas Stromberg 3dfda437ab
More tuning, quiet deaths 2022-09-21 13:34:10 -04:00
Thomas Stromberg bd5b37b646
More tuning, more queries 2022-09-21 07:42:51 -04:00
Thomas Stromberg e9c7c97858
Every day I'm tuning it 2022-09-20 21:56:01 -04:00
Thomas Stromberg 1965aaaab4
More Linux/macOS splits to get signature support 2022-09-20 17:46:47 -04:00
Thomas Stromberg 2ed9d394d5
Rewrite sketchy events, remove some false positives 2022-09-20 08:16:06 -04:00
Thomas Stromberg b75c7d5404
More tuning 2022-09-16 14:21:42 -04:00
Thomas Stromberg 8ff5e914eb
More tuning 2022-09-15 09:34:45 -04:00
Thomas Stromberg a512597ace
Lots of treats for the boys and girls 2022-09-13 20:46:04 -04:00
Thomas Stromberg 9810fe8e28
Detect unexpected modules and try our hand at exotic command access 2022-09-12 19:22:41 -04:00
Thomas Stromberg 197804e51b
More monday tuning 2022-09-12 18:25:18 -04:00
Thomas Stromberg 868f1ff13b
Monday morning tuning 2022-09-12 11:17:51 -04:00
Thomas Stromberg e5973acc25
Second weekend tuning 2022-09-10 13:10:54 -04:00
Thomas Stromberg c6797e3496
Reorganize paths, tune queries a bit 2022-09-09 12:51:52 -04:00
Thomas Stromberg dea818239f
More scripts 2022-09-09 10:16:28 -04:00
Thomas Stromberg d7a549759b
More tuning 2022-09-08 20:50:15 -04:00
Thomas Stromberg 5eab5c51a8
Just about done 2022-09-08 17:58:56 -04:00