osquery-defense-kit/fragments
Thomas Strömberg db3d6e5787
Merge pull request #167 from tstromberg/fpr-catch-up
Remove cgroup from macOS reference fragment, add fragments README
2023-02-08 21:06:53 -05:00
..
README.md Remove cgroup from reference fragment, add README 2023-02-08 21:04:48 -05:00
process_event_parents.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
process_event_parents_macos.sql Modified detections explicilty targeted towards macOS to not include cgroup_path fields anymore 2023-02-09 10:57:03 +11:00
process_parents.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
process_parents_macos.sql Remove cgroup from reference fragment, add README 2023-02-08 21:04:48 -05:00

README.md

These are reference query fragments that are meant to be shared across queries.