osquery-defense-kit/incident_response/iptables.sql
Thomas Stromberg e785c35614
v0.0.1
2022-10-13 09:11:17 -04:00

9 lines
286 B
SQL

-- Retrieves the current filters and chains per filter in the target system.
--
-- interval: 3600
-- platform: linux
-- value: Verify firewall settings are as restrictive as you need. Identify unwanted firewall holes made by malware or humans
-- version: 1.4.5
select * from iptables;