| .. |
|
fake-apple-launchd.sql
|
Add a lot more mitre data
|
2022-10-19 16:56:32 -04:00 |
|
unexpected-active-systemd-units.sql
|
fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc
|
2023-01-26 20:40:47 -05:00 |
|
unexpected-chrome-extensions.sql
|
Simplify unexpected-chrome-extensions exceptions for maintainability
|
2023-01-26 20:40:22 -05:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-launchd-program-arguments.sql
|
Run 'make reformat'
|
2023-01-20 09:24:24 -05:00 |
|
unexpected-launchd-program-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-linux.sql
|
fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc
|
2023-01-26 20:40:47 -05:00 |
|
unexpected-listening-port-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-small-udev-entry-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-systemctl-calls-linux.sql
|
Remove unused active fields, add WhatsApp ioreg exception
|
2023-01-27 08:46:48 -05:00 |
|
unexpected-uid0-daemon-linux.sql
|
Less false positives: particularly among systemctl calls
|
2023-01-20 08:40:08 -05:00 |
|
unexpected-uid0-daemon-macos.sql
|
Add a lot more mitre data
|
2022-10-19 16:56:32 -04:00 |
