osquery-defense-kit/detection/privesc
Thomas Stromberg fb7cd56249
fpr: abrt-dbus, gdm, chrome, ff, etc
2023-02-24 16:30:17 -05:00
..
docker-container-mounting-root.sql Query performance improvements, add pids, decrease frequency 2023-02-09 17:01:29 -05:00
setxid-cmdline-overflow-attempt.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
setxid-env-overflow-attempt.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
sketchy-docker-image-creator.sql Query performance improvements, add pids, decrease frequency 2023-02-09 17:01:29 -05:00
unexpected-elevated-children-events_linux.sql fpr: abrt-dbus, gdm, chrome, ff, etc 2023-02-24 16:30:17 -05:00
unexpected-elevated-children-events_macos.sql False positive flush, particularly in talkers 2023-02-17 11:57:23 -05:00
unexpected-privilege-escalation_linux.sql Query performance improvements, add pids, decrease frequency 2023-02-09 17:01:29 -05:00
unexpected-privilege-escalation_macos.sql Missed one 2023-02-18 16:10:48 -08:00
unexpected-privileged-containers.sql fpr: abrt-dbus, gdm, chrome, ff, etc 2023-02-24 16:30:17 -05:00
unexpected-setxid-process.sql fpr: Fujitsu, vmware, objective-see, paragon, etc 2023-02-18 12:02:40 -08:00