osquery-defense-kit/detection/persistence
Thomas Stromberg 41ee6feced
Merge remote-tracking branch 'upstream/main'
2023-02-02 20:33:46 -05:00
..
fake-apple-launchd.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-active-systemd-units.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-chrome-extensions.sql fpr: New Chrome etxensions, vbox, chrome, gcloud, gdm3, yay, etc 2023-01-30 14:58:47 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Merge to head 2023-02-01 15:11:51 -05:00
unexpected-launchd-program-macos.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00
unexpected-listening-port-linux.sql fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc 2023-01-26 20:40:47 -05:00
unexpected-listening-port-macos.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00
unexpected-small-udev-entry-linux.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00
unexpected-systemctl-calls-linux.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-uid0-daemon-linux.sql Merge pull request #158 from tstromberg/fpr-again 2023-02-02 20:33:01 -05:00
unexpected-uid0-daemon-macos.sql Merge remote-tracking branch 'upstream/main' 2023-02-02 20:33:46 -05:00