osquery-defense-kit/detection/execution
2022-10-17 19:06:17 -04:00
..
exotic-command-events-linux.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
exotic-command-events-macos.sql Decrease poll time to 60 seconds 2022-10-17 17:31:32 -04:00
exotic-commands.sql Add lost files from the rename 2022-10-14 14:19:32 -04:00
recently-created-executables.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
reverse-shell-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher-events.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
tiny-executable-events.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
tiny-executable.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-env-values-linux.sql Split env-values is case it helps decrease CPU time 2022-10-17 17:10:51 -04:00
unexpected-env-values-macos.sql Add more false positive filters 2022-10-17 19:01:16 -04:00
unexpected-execdir-events-linux.sql Decrease poll time to 60 seconds 2022-10-17 17:31:32 -04:00
unexpected-execdir-events-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-execdir-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-macos.sql Add lost files from the rename 2022-10-14 14:19:32 -04:00
unexpected-executable-permissions.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
unexpected-gatekeeper-approvals-macos.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
unexpected-mounts.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-osascript-calls.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-raw-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-setuid-binaries.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
xprotect-reports.sql Add support for interval tags 2022-10-14 14:19:13 -04:00