osquery-defense-kit/detection/exfil
..
high_disk_bytes_read.sql
yara-exec-connect-process-linux.sql
yara-unexpected-rust-http-exec-process.sql