osquery-defense-kit/detection/persistence
2023-02-08 20:06:26 -05:00
..
fake-apple-launchd.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-active-systemd-units.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-chrome-extensions.sql Massive reduction of false positives across the board 2023-02-08 20:06:26 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Monday morning false-positive purge 2023-02-08 14:37:09 -05:00
unexpected-launchd-program-macos.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00
unexpected-listening-port-linux.sql Monday morning false-positive purge 2023-02-08 14:37:09 -05:00
unexpected-listening-port-macos.sql Monday morning false-positive purge 2023-02-08 14:37:09 -05:00
unexpected-small-udev-entry-linux.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00
unexpected-systemctl-calls-linux.sql Massive reduction of false positives across the board 2023-02-08 20:06:26 -05:00
unexpected-uid0-daemon-linux.sql Massive reduction of false positives across the board 2023-02-08 20:06:26 -05:00
unexpected-uid0-daemon-macos.sql Add exceptions for socket_vmnet and pnpd 2023-02-08 14:44:22 -05:00