osquery-defense-kit/detection
2023-06-12 10:10:57 -04:00
..
c2 fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
collection fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
credentials Query tuning after Geacon testing 2023-05-17 10:54:16 -04:00
discovery Query tuning after Geacon testing 2023-05-17 10:54:16 -04:00
evasion fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
execution fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
exfil fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
impact fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc 2023-01-23 20:33:52 -05:00
initial_access fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
persistence fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
privesc fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00