mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-01-10 23:59:29 +00:00
5 lines
163 B
SQL
5 lines
163 B
SQL
-- -- https://posts.specterops.io/hunting-for-bad-apples-part-2-6f2d01b1f7d3
|
|
SELECT * FROM gatekeeper_approved_apps
|
|
WHERE
|
|
path NOT LIKE "/Users/%/code/bin/protoc"
|