| .. |
|
fake-apple-launchd.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
low-fd-socket.sql
|
fpr: macOS, yubikey, Premiere, dnf, vagrant, etc
|
2023-05-23 11:31:37 -04:00 |
|
minimal-socket-client-linux.sql
|
minimal socket client: speed query up
|
2023-06-08 20:44:08 -04:00 |
|
minimal-socket-client-macos.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-active-systemd-units.sql
|
Remove file sizes from systemd exception key
|
2023-06-08 18:26:57 -04:00 |
|
unexpected-chrome-extensions.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-device.sql
|
fpr: terragrunt, mdnsResponder, Spotify, Zoom, etc
|
2023-06-14 10:58:41 -04:00 |
|
unexpected-global-lock.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-launchd-program-arguments.sql
|
fpr: macOS, Signal, Creative Labs, node, etc
|
2023-06-07 09:55:17 -04:00 |
|
unexpected-launchd-program-macos.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-listening-port-linux.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-listening-port-macos.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-lock-opener.sql
|
fpr: Slack, Gnome, Sigstore, Logitune, etc
|
2023-06-12 10:10:57 -04:00 |
|
unexpected-small-udev-entry-linux.sql
|
fpr: microbit, i3, Grammarly for Safari, wine
|
2023-05-02 17:49:53 -04:00 |
|
unexpected-ssh-authorized-keys.sql
|
make reformat
|
2023-05-08 13:20:47 -04:00 |
|
unexpected-systemctl-calls-linux.sql
|
Make process times broadly available, minor opts
|
2023-05-16 17:18:39 -04:00 |
|
unexpected-uid0-daemon-linux.sql
|
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
|
2023-06-30 16:38:31 -04:00 |
|
unexpected-uid0-daemon-macos.sql
|
fpr: Steam, Presenting, Wavebox, multipass, parallels, cargo, dnf, Kindle, DaveTheDiver
|
2023-07-03 07:16:14 -04:00 |
