osquery-defense-kit/detection/discovery
Thomas Stromberg f25cfe1399
fpr: aws-sdk, melange, Tailscale, Xprotect, etc
2023-03-03 07:24:42 -05:00
..
unexpected-bpf-user.sql Speed up unexpected-bpf-users query by basing it on processes 2023-01-09 15:18:00 -05:00
unexpected-netutil-calls-linux.sql fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc 2023-02-14 08:33:05 -05:00
unexpected-netutil-calls-macos.sql fpr: aws-sdk, melange, Tailscale, Xprotect, etc 2023-03-03 07:24:42 -05:00
unexpected-pcap-user-linux.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-pcap-user-macos.sql Purge observed false positives 2023-02-09 17:54:41 -05:00