osquery-defense-kit/detection
Thomas Stromberg 1652037355
Add initial setuid env overflow detection
2022-10-30 09:40:31 -04:00
..
c2 Add exception for 'go run' 2022-10-30 09:39:48 -04:00
collection Final KubeCon 2022 false-positive cleanup 2022-10-28 19:24:00 -04:00
credentials Merge another day worth of false positives 2022-10-27 10:23:15 -04:00
discovery Minor adjustments 2022-10-17 17:11:15 -04:00
evasion Add exception for 'go run' 2022-10-30 09:39:48 -04:00
execution Add initial setuid env overflow detection 2022-10-30 09:40:31 -04:00
exfil Merge another day worth of false positives 2022-10-27 10:23:15 -04:00
impact Ignore any /etc/hosts pointing to 127.x.x.x 2022-10-21 17:49:12 -04:00
initial_access Add exceptions for zellij & warp 2022-10-29 14:11:33 -04:00
persistence Final KubeCon 2022 false-positive cleanup 2022-10-28 19:24:00 -04:00
privesc Add setxid-cmdline-overflow-attempt.sql 2022-10-29 19:58:59 -04:00