osquery-defense-kit/detection/discovery
Thomas Stromberg 272711ae7a
fpr: node, nc, busybox, libvirt, etc
2023-05-05 12:44:46 -04:00
..
unexpected-bpf-user.sql Speed up unexpected-bpf-users query by basing it on processes 2023-01-09 15:18:00 -05:00
unexpected-netutil-calls-linux.sql fpr: node, nc, busybox, libvirt, etc 2023-05-05 12:44:46 -04:00
unexpected-netutil-calls-macos.sql fpr: aws-sdk, melange, Tailscale, Xprotect, etc 2023-03-03 07:24:42 -05:00
unexpected-pcap-user-linux.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-pcap-user-macos.sql Purge observed false positives 2023-02-09 17:54:41 -05:00