Thomas Stromberg
|
b39fca4e9f
|
fpr: RSA keys, tcpdump, login, crane, souregraph, etc
|
2023-09-20 09:30:46 -04:00 |
|
Thomas Stromberg
|
d74405c817
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
Thomas Stromberg
|
83cc38207e
|
fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc
|
2023-01-23 20:33:52 -05:00 |
|
Thomas Stromberg
|
f7c1557aee
|
fpr: libinput, kue, updatedb, mariadb, terraform
|
2023-01-23 08:13:04 -05:00 |
|
Thomas Stromberg
|
cb896b9e10
|
Filter out new false positives
|
2023-01-13 15:24:18 -05:00 |
|
Thomas Stromberg
|
76d5c8564b
|
Resolve latest reported false positives
|
2022-12-02 11:20:18 -05:00 |
|
Thomas Stromberg
|
32e3657221
|
Accept strace-log-merge anywhere
|
2022-11-10 11:31:37 -05:00 |
|
Thomas Stromberg
|
f1a3354495
|
Address false positives: nginx-ingress-controller, dbus, etc
|
2022-11-10 11:04:48 -05:00 |
|
Thomas Stromberg
|
213e29afcc
|
Simplify macos-execdir, reduce false positives
|
2022-11-07 10:03:43 -05:00 |
|
Thomas Stromberg
|
e7e714c9db
|
Make another stab at reducing false positives across the map
|
2022-11-03 11:51:54 -04:00 |
|
Thomas Stromberg
|
caab2a6c82
|
Loads of fresh new false-positives removal
|
2022-10-31 17:40:37 -04:00 |
|
Thomas Stromberg
|
5ebe05daf7
|
Ignore any /etc/hosts pointing to 127.x.x.x
|
2022-10-21 17:49:12 -04:00 |
|
Thomas Stromberg
|
ab94de7770
|
Add a lot more mitre data
|
2022-10-19 16:56:32 -04:00 |
|
Thomas Stromberg
|
cee1710f74
|
Finish out the incident_response refactor
|
2022-10-19 16:19:53 -04:00 |
|
Thomas Stromberg
|
8679ca943d
|
More false positive management
|
2022-10-18 14:26:47 -04:00 |
|
Thomas Stromberg
|
5839a20fb3
|
Detect more
|
2022-10-18 10:08:34 -04:00 |
|
Thomas Stromberg
|
2b5ea76729
|
Apply 'npx sql-formatter -l sqlite'
|
2022-10-17 19:06:17 -04:00 |
|
Thomas Stromberg
|
d2bdffe89e
|
Add support for interval tags
|
2022-10-14 14:19:13 -04:00 |
|
Thomas Stromberg
|
d164591365
|
Add more localhost entries
|
2022-10-13 18:08:03 -04:00 |
|
Thomas Stromberg
|
27b9e620f2
|
Add *.wtf to allow list
|
2022-10-13 18:06:07 -04:00 |
|
Thomas Stromberg
|
077c8f36fc
|
Filter out vaikas dev hostnames
|
2022-10-13 17:58:29 -04:00 |
|
Thomas Stromberg
|
20452b128b
|
Migrate query strings from double to single apostrophes
|
2022-10-13 14:59:32 -04:00 |
|
Thomas Stromberg
|
26ee658c4a
|
Initial re-organization around the MITRE ATT&CK framework
|
2022-10-11 21:53:36 -04:00 |