osquery-defense-kit/detection/c2
Thomas Stromberg b39fca4e9f
fpr: RSA keys, tcpdump, login, crane, souregraph, etc
2023-09-20 09:30:46 -04:00
..
unexpected-dns-traffic-events.sql fpr: sourcegraph, nginx, factorio, fan control, emacs, nushell 2023-09-14 17:13:12 -04:00
unexpected-dns-traffic.sql Add many exceptions 2023-08-15 18:13:06 -04:00
unexpected-https-linux.sql fpr: RSA keys, tcpdump, login, crane, souregraph, etc 2023-09-20 09:30:46 -04:00
unexpected-https-macos.sql fpr: RSA keys, tcpdump, login, crane, souregraph, etc 2023-09-20 09:30:46 -04:00
unexpected-icmp-socket-events.sql Slow queries down, minor improvements 2023-02-01 16:17:36 -05:00
unexpected-icmp-socket.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
unexpected-libcurl-user-linux.sql Remove recently common false positives 2023-09-01 17:09:47 -04:00
unexpected-libcurl-user-macos.sql Add unexpected libcurl detector 2023-03-16 16:10:25 -04:00
unexpected-talker-events.sql fpr: RSA keys, tcpdump, login, crane, souregraph, etc 2023-09-20 09:30:46 -04:00
unexpected-talkers-linux.sql Remove recently common false positives 2023-09-01 17:09:47 -04:00
unexpected-talkers-macos.sql fpr: RSA keys, tcpdump, login, crane, souregraph, etc 2023-09-20 09:30:46 -04:00