| .. |
|
fake-apple-launchd.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
unexpected-active-systemd-units.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
unexpected-chrome-extensions.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-launchd-program-arguments.sql
|
Monday morning false-positive purge
|
2023-02-08 14:37:09 -05:00 |
|
unexpected-launchd-program-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-linux.sql
|
Remove com.docker.backend (macOS specific)
|
2023-02-10 10:32:14 -05:00 |
|
unexpected-listening-port-macos.sql
|
Make sure caddy & kubectl are in the wider listening range
|
2023-02-10 10:31:19 -05:00 |
|
unexpected-small-udev-entry-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-systemctl-calls-linux.sql
|
Purge observed false positives
|
2023-02-09 17:54:41 -05:00 |
|
unexpected-uid0-daemon-linux.sql
|
False positive removal and minor query perf improvements
|
2023-02-10 10:21:06 -05:00 |
|
unexpected-uid0-daemon-macos.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
99f8793169