osquery-defense-kit/detection/initial_access
Thomas Stromberg 111c15e20b fpr: macOS, yubikey, Premiere, dnf, vagrant, etc 2023-05-23 11:31:37 -04:00
..
sketchy-mounted-diskimage.sql fpr: LGHUB, aomshm, Wisdolia, uubyte, eclipse, etc 2023-05-11 11:29:55 -04:00
unexpected-diskimage-name-macos.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-diskimage-source-macos.sql fpr: macOS, yubikey, Premiere, dnf, vagrant, etc 2023-05-23 11:31:37 -04:00
unexpected-shell-parent-events.sql Make process times broadly available, minor opts 2023-05-16 17:18:39 -04:00
unexpected-shell-parents.sql fpr: macOS, yubikey, Premiere, dnf, vagrant, etc 2023-05-23 11:31:37 -04:00
unexpected-volume-contents.sql make reformat 2023-05-08 13:20:47 -04:00
unexpected-webmail-downloads.sql fpr: yum, systemd, cloud-sql-proxy, image-automation-controller, helm, bom, aws 2023-03-14 19:00:44 -04:00