osquery-defense-kit/detection/c2
Thomas Stromberg f038dc7557
fpr, refactor minimal-socket-client-macos
2024-10-24 15:12:33 -04:00
..
unexpected-dns-traffic-events.sql fpr + Mark touched-executable as extra on macOS 2024-10-24 11:20:06 -04:00
unexpected-dns-traffic.sql fpr: bpftool, curl, pulumi, Docker Desktop, go tests 2024-10-23 10:59:37 -04:00
unexpected-https-linux.sql widen query scope 2024-10-16 09:32:00 -04:00
unexpected-https-macos.sql fpr, refactor minimal-socket-client-macos 2024-10-24 15:12:33 -04:00
unexpected-icmp-socket-events.sql Performance tuning, mark some Linux queries as 'extra' 2024-03-15 19:06:16 -04:00
unexpected-icmp-socket.sql Performance tuning, mark some Linux queries as 'extra' 2024-03-15 19:06:16 -04:00
unexpected-root-libcurl-proc-linux.sql fpr: sequoia, osquery, cups, atops, transmission, etc 2024-09-23 11:07:53 -04:00
unexpected-root-libcurl-proc-macos.sql fpr: prosoft, ujust, kandji-library-manager, etc 2024-09-26 12:40:04 -04:00
unexpected-talker-events.sql Add events and extra tags to relevant event-based queries 2024-09-24 15:36:03 -04:00
unexpected-talkers-linux.sql fpr: wider talkers exception, chrome extensions, postgres 2024-10-23 17:28:37 -04:00
unexpected-talkers-macos.sql fpr, refactor minimal-socket-client-macos 2024-10-24 15:12:33 -04:00