osquery-defense-kit/detection/evasion
2022-11-23 07:10:03 -05:00
..
empty_root_environ_linux.sql Add gdm-session-wor 2022-11-22 09:24:03 -05:00
empty_root_environ_macos.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
executables-from-the-future.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
hidden-cwd.sql Add exceptions for Microsoft teams, ldconfig, fix go build paths 2022-11-17 07:20:19 -05:00
hidden-executable.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
hidden-home-config-dir.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
hidden-home-library-dir.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
hidden-launchd-files-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
hidden-parent-pid.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
missing-from-disk-linux.sql Split parent-missing-from-disk, address false positives 2022-11-23 07:10:03 -05:00
missing-from-disk-macos.sql Address false positives: nginx-ingress-controller, dbus, etc 2022-11-10 11:04:48 -05:00
name_path_mismatch.sql Add exceptions for Microsoft teams, ldconfig, fix go build paths 2022-11-17 07:20:19 -05:00
old-binaries-running.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
parent-missing-from-disk-linux.sql Split parent-missing-from-disk, address false positives 2022-11-23 07:10:03 -05:00
parent-missing-from-disk-macos.sql Split parent-missing-from-disk, address false positives 2022-11-23 07:10:03 -05:00
ssh-notty.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
touched-executable-linux.sql Add exceptions for Microsoft teams, ldconfig, fix go build paths 2022-11-17 07:20:19 -05:00
touched-executable-macos.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-alf-exceptions-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-dev-entries.sql Don't mask directories, run on macOS 2022-10-20 07:59:06 -04:00
unexpected-dev-executables-linux.sql Fix file.mode comparisons 2022-11-16 11:01:22 -05:00
unexpected-etc-executables.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-hidden-system-folders.sql Ignore /tmp/.DS_Store 2022-11-03 14:24:40 -04:00
unexpected-kernel-extensions-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-kernel-modules-linux.sql Simplify macos-execdir, reduce false positives 2022-11-07 10:03:43 -05:00
unexpected-ld-so-files-linux.sql Add more false positive filters 2022-10-17 19:01:16 -04:00
unexpected-library-entries-macos.sql Merge pull request #9 from chainguard-dev/false-positives 2022-10-20 13:39:15 -04:00
unexpected-tmp-executables.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-var-executables-linux.sql Ignore JSON files 2022-11-03 14:24:53 -04:00
unexpected-var-executables-macos.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00