osquery-defense-kit/detection
Thomas Stromberg 5ea01eabeb
Exclude .rustup toolchains
2023-03-28 17:02:30 -04:00
..
c2 fpr: xdg, docker, dbus, bpfilter_umh, docker, spotify, mage 2023-03-28 16:25:26 -04:00
collection fpr: tilt, electron, cilium, write/read improvements 2023-03-24 10:42:06 -04:00
credentials fpr: xdg, docker, dbus, bpfilter_umh, docker, spotify, mage 2023-03-28 16:25:26 -04:00
discovery fpr: aws-sdk, melange, Tailscale, Xprotect, etc 2023-03-03 07:24:42 -05:00
evasion Mask all descendants of .github/ 2023-03-28 17:02:01 -04:00
execution Exclude .rustup toolchains 2023-03-28 17:02:30 -04:00
exfil move missing comma 2023-03-24 11:20:37 -04:00
impact
initial_access fpr: xdg, docker, dbus, bpfilter_umh, docker, spotify, mage 2023-03-28 16:25:26 -04:00
persistence fpr: add new containerd systemd file 2023-03-28 16:31:02 -04:00
privesc fpr: xdg, docker, dbus, bpfilter_umh, docker, spotify, mage 2023-03-28 16:25:26 -04:00