7 Commits

Author	SHA1	Message	Date
Thomas Stromberg	4f4ae0ed38	False positive removal and minor query perf improvements	2023-02-10 10:21:06 -05:00
Thomas Strömberg	db3d6e5787	Merge pull request #167 from tstromberg/fpr-catch-up ... Remove cgroup from macOS reference fragment, add fragments README	2023-02-08 21:06:53 -05:00
Thomas Stromberg	b7681c3168	Remove cgroup from reference fragment, add README	2023-02-08 21:04:48 -05:00
echunduri	e44dc167e9	Modified detections explicilty targeted towards macOS to not include cgroup_path fields anymore	2023-02-09 10:57:03 +11:00
Thomas Stromberg	bb3e1f964e	Run make reformat, update max rows for incident response	2023-02-02 17:58:19 -05:00
Thomas Stromberg	2093a26423	Fix broken macOS queries	2023-02-02 15:33:25 -05:00
Thomas Stromberg	f9dce0a72d	Include more process information across queries	2023-02-01 13:55:55 -05:00