osquery-defense-kit/detection/execution
2022-10-17 17:30:41 -04:00
..
exotic-command-events-linux.sql Lower polling time to once a minute 2022-10-17 17:30:41 -04:00
exotic-command-events-macos.sql
exotic-commands.sql
recently-created-executables.sql
reverse-shell-socket.sql
sketchy-fetcher-events.sql
sketchy-fetcher.sql
tiny-executable-events.sql
tiny-executable.sql
unexpected-env-values-linux.sql Split env-values is case it helps decrease CPU time 2022-10-17 17:10:51 -04:00
unexpected-env-values-macos.sql Split env-values is case it helps decrease CPU time 2022-10-17 17:10:51 -04:00
unexpected-execdir-events-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-events-macos.sql
unexpected-execdir-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-macos.sql
unexpected-executable-permissions.sql
unexpected-gatekeeper-approvals-macos.sql
unexpected-mounts.sql
unexpected-osascript-calls.sql
unexpected-raw-socket.sql
unexpected-setuid-binaries.sql
xprotect-reports.sql