| .. |
|
fake-apple-launchd.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
unexpected-active-systemd-units.sql
|
fpr: My ORA, Ecamm, setroubleshootd, etc
|
2023-02-14 19:46:36 -05:00 |
|
unexpected-chrome-extensions.sql
|
fpr: My ORA, Ecamm, setroubleshootd, etc
|
2023-02-14 19:46:36 -05:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-launchd-program-arguments.sql
|
Monday morning false-positive purge
|
2023-02-08 14:37:09 -05:00 |
|
unexpected-launchd-program-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-linux.sql
|
fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc
|
2023-02-14 08:33:05 -05:00 |
|
unexpected-listening-port-macos.sql
|
fpr: My ORA, Ecamm, setroubleshootd, etc
|
2023-02-14 19:46:36 -05:00 |
|
unexpected-small-udev-entry-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-ssh-authorized-keys.sql
|
New detector: unexpected ssh-authorized-keys
|
2023-02-14 20:36:27 -05:00 |
|
unexpected-systemctl-calls-linux.sql
|
Purge observed false positives
|
2023-02-09 17:54:41 -05:00 |
|
unexpected-uid0-daemon-linux.sql
|
fpr: ACE, Prusa, steam, pacman, Xcode, Adobe
|
2023-02-14 20:16:02 -05:00 |
|
unexpected-uid0-daemon-macos.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
