osquery-defense-kit/detection/initial_access
Thomas Stromberg 66ee3484c0
Remove unused active fields, add WhatsApp ioreg exception
2023-01-27 08:46:48 -05:00
..
unexpected-diskimage-name-macos.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-diskimage-source-macos.sql fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc 2023-01-23 20:33:52 -05:00
unexpected-shell-parent-events.sql Remove unused active fields, add WhatsApp ioreg exception 2023-01-27 08:46:48 -05:00
unexpected-shell-parents.sql fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc 2023-01-26 20:40:47 -05:00
unexpected-volume-contents.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-volume-names.sql fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc 2023-01-26 20:40:47 -05:00
unexpected-webmail-downloads.sql Refactor process_events queries for more accurate parenting 2023-01-26 11:40:54 -05:00