osquery-defense-kit/incident_response/alf_exceptions.sql
2022-10-17 19:06:17 -04:00

11 lines
290 B
SQL

-- Retrieves the exceptions for the Application Layer Firewall in OSX.
--
-- interval: 3600
-- platform: darwin
-- value: Verify firewall settings are as restrictive as you need. Identify unwanted firewall holes made by malware or humans
-- version: 1.4.5
select
*
from
alf_exceptions;