osquery-defense-kit/detection
Thomas Stromberg 877b2c495b
exotic events linux: double interval, reduce hash lookups
2023-12-12 12:33:38 -05:00
..
c2 fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
collection fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
credentials fpr: Kolide, qemu, bash, monday, macOS 2023-10-24 18:01:36 -04:00
discovery fpr: RSA keys, tcpdump, login, crane, souregraph, etc 2023-09-20 09:30:46 -04:00
evasion fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
execution exotic events linux: double interval, reduce hash lookups 2023-12-12 12:33:38 -05:00
exfil fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
impact fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
initial_access fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
persistence fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
privesc fpr: sourcegraph, nginx, factorio, fan control, emacs, nushell 2023-09-14 17:13:12 -04:00