.. |
unexpected-dns-traffic-events.sql
|
fpr + Mark touched-executable as extra on macOS
|
2024-10-24 11:20:06 -04:00 |
unexpected-dns-traffic.sql
|
fpr: bpftool, curl, pulumi, Docker Desktop, go tests
|
2024-10-23 10:59:37 -04:00 |
unexpected-https-linux.sql
|
widen query scope
|
2024-10-16 09:32:00 -04:00 |
unexpected-https-macos.sql
|
fpr, refactor minimal-socket-client-macos
|
2024-10-24 15:12:33 -04:00 |
unexpected-icmp-socket-events.sql
|
Performance tuning, mark some Linux queries as 'extra'
|
2024-03-15 19:06:16 -04:00 |
unexpected-icmp-socket.sql
|
Performance tuning, mark some Linux queries as 'extra'
|
2024-03-15 19:06:16 -04:00 |
unexpected-root-libcurl-proc-linux.sql
|
fpr: sequoia, osquery, cups, atops, transmission, etc
|
2024-09-23 11:07:53 -04:00 |
unexpected-root-libcurl-proc-macos.sql
|
fpr: prosoft, ujust, kandji-library-manager, etc
|
2024-09-26 12:40:04 -04:00 |
unexpected-talker-events.sql
|
Add events and extra tags to relevant event-based queries
|
2024-09-24 15:36:03 -04:00 |
unexpected-talkers-linux.sql
|
fpr: wider talkers exception, chrome extensions, postgres
|
2024-10-23 17:28:37 -04:00 |
unexpected-talkers-macos.sql
|
fpr, refactor minimal-socket-client-macos
|
2024-10-24 15:12:33 -04:00 |