osquery-defense-kit/detection/privesc
Thomas Stromberg 9f63e3b21d
Begin making use of cgroup_paths, clear more false positives
2022-11-16 16:52:39 -05:00
..
docker-container-mounting-root.sql Add spacing (sqlformat) 2022-10-21 17:39:53 -04:00
setxid-cmdline-overflow-attempt.sql Add setxid-cmdline-overflow-attempt.sql 2022-10-29 19:58:59 -04:00
setxid-env-overflow-attempt.sql Refactor execdir, remove false positives 2022-11-07 20:36:37 -05:00
sketchy-docker-image-creator.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
unexpected-elevated-children-events_linux.sql More exclusions 2022-11-08 12:59:11 -05:00
unexpected-elevated-children-events_macos.sql Refactor execdir, remove false positives 2022-11-07 20:36:37 -05:00
unexpected-privilege-escalation_linux.sql Refactor execdir, remove false positives 2022-11-07 20:36:37 -05:00
unexpected-privilege-escalation_macos.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
unexpected-privileged-containers.sql Add a melange build exclusion 2022-11-03 14:25:35 -04:00
unexpected-setxid-process.sql More false positive management 2022-11-16 14:49:36 -05:00