osquery-defense-kit/detection/initial_access
Thomas Stromberg f9dce0a72d
Include more process information across queries
2023-02-01 13:55:55 -05:00
..
unexpected-diskimage-name-macos.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-diskimage-source-macos.sql fpr: New Chrome etxensions, vbox, chrome, gcloud, gdm3, yay, etc 2023-01-30 14:58:47 -05:00
unexpected-shell-parent-events.sql Include more process information across queries 2023-02-01 13:55:55 -05:00
unexpected-shell-parents.sql Include more process information across queries 2023-02-01 13:55:55 -05:00
unexpected-volume-contents.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-volume-names.sql Include possible volume sources 2023-01-27 10:36:37 -05:00
unexpected-webmail-downloads.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00