osquery-defense-kit/detection/persistence
2022-11-18 10:27:43 -05:00
..
fake-apple-launchd.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-active-systemd-units.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
unexpected-chrome-extensions.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Remove more in-the-wild false positives 2022-10-27 16:55:00 -04:00
unexpected-launchd-program.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-listening-port-linux.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-listening-port-macos.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-small-udev-entry.sql Add exception for Wireshark usbmon 2022-11-04 11:52:52 -04:00
unexpected-uid0-daemon-linux.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-uid0-daemon-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00