osquery-defense-kit/detection/persistence
2023-01-19 11:52:31 -05:00
..
fake-apple-launchd.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-active-systemd-units.sql False positives: apt-daily, github runner, Slack helper, Foxit, syncthing 2023-01-19 11:52:31 -05:00
unexpected-chrome-extensions.sql False positives: Chrome extensions, Steam games, tmp files, Photoshop 2023-01-18 14:10:33 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Weekend false-positive flush 2023-01-14 08:19:26 -05:00
unexpected-launchd-program.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-listening-port-linux.sql False positive reduction: Messenger, Chrome, Final Cut Pro, etc 2023-01-18 09:49:56 -05:00
unexpected-listening-port-macos.sql Friday False Positive Flush 2023-01-13 14:10:43 -05:00
unexpected-small-udev-entry.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
unexpected-systemctl-calls.sql New detector: unexpected systemctl calls 2023-01-19 11:39:52 -05:00
unexpected-uid0-daemon-linux.sql Weekend false-positive flush 2023-01-14 08:19:26 -05:00
unexpected-uid0-daemon-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00