osquery-defense-kit/detection/privesc
2023-01-09 09:34:20 -05:00
..
docker-container-mounting-root.sql
setxid-cmdline-overflow-attempt.sql
setxid-env-overflow-attempt.sql
sketchy-docker-image-creator.sql
unexpected-elevated-children-events_linux.sql false positives: dots, ipn, apport-gtk, homebrew, hyperkey, contexts 2023-01-09 09:34:20 -05:00
unexpected-elevated-children-events_macos.sql Remove more false positives: kind, gopls, docker.socket, etc 2022-12-15 10:20:16 -05:00
unexpected-privilege-escalation_linux.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
unexpected-privilege-escalation_macos.sql
unexpected-privileged-containers.sql Resolve latest reported false positives 2022-12-02 11:20:18 -05:00
unexpected-setxid-process.sql