Thomas Stromberg 897c96bd33 Remove more in-the-wild false positives		2022-10-27 16:55:00 -04:00
..
exotic-command-events-linux.sql	Merge another day worth of false positives	2022-10-27 10:23:15 -04:00
exotic-command-events-macos.sql	Reduce more false positives found on macOS and Linux	2022-10-25 21:27:41 -04:00
exotic-commands.sql	noop: Run 'make reformat'	2022-10-21 17:45:43 -04:00
recently-created-executables-linux.sql	Remove more in-the-wild false positives	2022-10-27 16:55:00 -04:00
recently-created-executables-macos.sql	Merge another day worth of false positives	2022-10-27 10:23:15 -04:00
reverse-shell-socket.sql
sketchy-fetcher-events.sql
sketchy-fetcher.sql	Merge another day worth of false positives	2022-10-27 10:23:15 -04:00
tiny-executable-events.sql
tiny-executable.sql	detection: Reduce Linux desktop false positives	2022-10-25 11:39:51 -04:00
unexpected-env-values-linux.sql	Rewrite process_envs queries for faster performance	2022-10-27 11:26:35 -04:00
unexpected-env-values-macos.sql	Improve perforance by re-ordering JOIN's	2022-10-27 16:54:41 -04:00
unexpected-execdir-events-linux.sql
unexpected-execdir-events-macos.sql	Merge another day worth of false positives	2022-10-27 10:23:15 -04:00
unexpected-execdir-linux.sql
unexpected-execdir-macos.sql
unexpected-executable-permissions.sql
unexpected-gatekeeper-approvals-macos.sql	Fix platform name: darwin instead of macos	2022-10-21 17:39:35 -04:00
unexpected-mounts.sql
unexpected-osascript-calls.sql	Remove more in-the-wild false positives	2022-10-27 16:55:00 -04:00
unexpected-raw-socket.sql
unexpected-setuid-binaries.sql
xprotect-reports.sql