osquery-defense-kit/detection/privesc
Dave Smith 7ad81b16c2
add extra tag to setxid-cmdline-overflow-attempt.sql
Signed-off-by: Dave Smith <dave.smith@chainguard.dev>
2024-10-24 18:42:46 -04:00
..
docker-container-mounting-root.sql
setxid-cmdline-overflow-attempt.sql add extra tag to setxid-cmdline-overflow-attempt.sql 2024-10-24 18:42:46 -04:00
setxid-env-overflow-attempt.sql
sketchy-docker-image-creator.sql
unexpected-elevated-children-events_linux.sql
unexpected-elevated-children-events_macos.sql fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
unexpected-privilege-escalation_linux.sql fpr: Docker Desktop, code-oss, incus, etc 2024-02-26 17:26:56 -05:00
unexpected-privilege-escalation_macos.sql
unexpected-privileged-containers.sql fpr: lima, rpm-ostree, gitsign, kde, python, etc 2024-07-01 21:56:28 -04:00
unexpected-setxid-process.sql fpr: sequoia, osquery, cups, atops, transmission, etc 2024-09-23 11:07:53 -04:00