osquery-defense-kit/detection/evasion
2022-11-16 16:52:39 -05:00
..
empty_environ_linux.sql Address false positives: nginx-ingress-controller, dbus, etc 2022-11-10 11:04:48 -05:00
empty_environ_macos.sql More false positive management 2022-11-16 14:49:36 -05:00
executables-from-the-future.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
hidden-cwd.sql Make all of ~/.% an exclusion 2022-11-08 14:22:12 -05:00
hidden-home-config-dir.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
hidden-home-library-dir.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
hidden-launchd-files-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
hidden-parent-pid.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
missing-from-disk-linux.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
missing-from-disk-macos.sql Address false positives: nginx-ingress-controller, dbus, etc 2022-11-10 11:04:48 -05:00
name_path_mismatch.sql Complete cleanup phase 1 2022-11-16 11:18:45 -05:00
old-binaries-running.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
parent-missing-from-disk.sql Add exception for snap container mounts 2022-11-16 10:39:21 -05:00
ssh-notty.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
touched-executable-linux.sql Add exception for 'go run' 2022-10-30 09:39:48 -04:00
touched-executable-macos.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
unexpected-alf-exceptions-macos.sql Split up the unexpected-filesystem-entries by platform 2022-10-14 15:14:24 -04:00
unexpected-dev-entries.sql Don't mask directories, run on macOS 2022-10-20 07:59:06 -04:00
unexpected-dev-executables-linux.sql Fix file.mode comparisons 2022-11-16 11:01:22 -05:00
unexpected-etc-executables.sql Add redhat-lsb back 2022-11-10 12:14:18 -05:00
unexpected-hidden-system-folders.sql Ignore /tmp/.DS_Store 2022-11-03 14:24:40 -04:00
unexpected-kernel-extensions-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-kernel-modules-linux.sql Simplify macos-execdir, reduce false positives 2022-11-07 10:03:43 -05:00
unexpected-ld-so-files-linux.sql Add more false positive filters 2022-10-17 19:01:16 -04:00
unexpected-library-entries-macos.sql Merge pull request #9 from chainguard-dev/false-positives 2022-10-20 13:39:15 -04:00
unexpected-tmp-executables.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
unexpected-var-executables-linux.sql Ignore JSON files 2022-11-03 14:24:53 -04:00
unexpected-var-executables-macos.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00