osquery-defense-kit/detection/execution
2022-11-22 09:21:03 -05:00
..
exotic-command-events-linux.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
exotic-command-events-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
exotic-commands.sql Add exceptions for Microsoft teams, ldconfig, fix go build paths 2022-11-17 07:20:19 -05:00
recently-created-executables-linux.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
recently-created-executables-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
reverse-shell-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher-events.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
sketchy-fetcher.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
tiny-executable-events.sql Add exceptions for Microsoft teams, ldconfig, fix go build paths 2022-11-17 07:20:19 -05:00
tiny-executable.sql Simplify macos-execdir, reduce false positives 2022-11-07 10:03:43 -05:00
unexpected-env-values-linux.sql Add /usr/local/lib/libmimalloc.so to allowed list of LD_PRELOAD 2022-11-10 11:20:58 -05:00
unexpected-env-values-macos.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-execdir-events-linux.sql Add exceptions for terraform, hugo, macOS updates 2022-11-08 14:32:38 -05:00
unexpected-execdir-events-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-execdir-linux.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-execdir-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-executable-permissions.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-gatekeeper-approvals-macos.sql Pre-Thanksgiving False Positive cleanup, including Pop!OS support 2022-11-22 09:21:03 -05:00
unexpected-mounts.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-osascript-calls.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
unexpected-raw-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-setuid-binaries.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
xprotect-reports.sql Add support for interval tags 2022-10-14 14:19:13 -04:00