osquery-defense-kit/detection/evasion
2023-01-06 10:36:48 -05:00
..
empty_root_environ_linux.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
empty_root_environ_macos.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
executables-from-the-future.sql
hidden-cwd.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
hidden-executable.sql Fix more false positives, particularly in shell/fetcher parents 2023-01-06 10:18:19 -05:00
hidden-home-config-dir.sql Sort out more false positives 2022-12-16 17:37:32 -05:00
hidden-home-library-dir.sql Run 'make reformat' 2022-11-16 11:02:29 -05:00
hidden-launchd-files-macos.sql
hidden-parent-pid.sql
missing-from-disk-linux.sql Split parent-missing-from-disk, address false positives 2022-11-23 07:10:03 -05:00
missing-from-disk-macos.sql Sort out more false positives 2022-12-16 17:37:32 -05:00
name_path_mismatch.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
old-binaries-running.sql
parent-missing-from-disk-linux.sql Catch up to other false positives over winter break 2023-01-04 11:03:38 -05:00
parent-missing-from-disk-macos.sql Split parent-missing-from-disk, address false positives 2022-11-23 07:10:03 -05:00
ssh-notty.sql Begin making use of cgroup_paths, clear more false positives 2022-11-16 16:52:39 -05:00
touched-executable-linux.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
touched-executable-macos.sql Resolve latest reported false positives 2022-12-02 11:20:18 -05:00
unexpected-alf-exceptions-macos.sql Another false positive flush: Capital One, tailscaled, agetty, snap, ninja, epson printers, etc 2022-12-15 16:51:58 -05:00
unexpected-dev-entries.sql
unexpected-dev-executables-linux.sql Catch up to other false positives over winter break 2023-01-04 11:03:38 -05:00
unexpected-etc-executables.sql Another false positive flush: Capital One, tailscaled, agetty, snap, ninja, epson printers, etc 2022-12-15 16:51:58 -05:00
unexpected-hidden-system-folders.sql Catch up to other false positives over winter break 2023-01-04 11:03:38 -05:00
unexpected-kernel-extensions-macos.sql
unexpected-kernel-modules-linux.sql Simplify macos-execdir, reduce false positives 2022-11-07 10:03:43 -05:00
unexpected-ld-so-files-linux.sql
unexpected-library-entries-macos.sql Post-Thanksgiving false positive flush 2022-11-28 16:06:07 -05:00
unexpected-tmp-executables.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-var-executables-linux.sql Ignore JSON files 2022-11-03 14:24:53 -04:00
unexpected-var-executables-macos.sql Another false positive flush: Capital One, tailscaled, agetty, snap, ninja, epson printers, etc 2022-12-15 16:51:58 -05:00