| .. |
|
docker-container-mounting-root.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
|
setxid-cmdline-overflow-attempt.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
setxid-env-overflow-attempt.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
sketchy-docker-image-creator.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
|
unexpected-elevated-children-events_linux.sql
|
Linux events: decrease CPU usage of elevated children & execdir
|
2023-02-17 10:40:58 -05:00 |
|
unexpected-elevated-children-events_macos.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-privilege-escalation_linux.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
|
unexpected-privilege-escalation_macos.sql
|
Missed one
|
2023-02-18 16:10:48 -08:00 |
|
unexpected-privileged-containers.sql
|
fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc
|
2023-01-23 20:33:52 -05:00 |
|
unexpected-setxid-process.sql
|
fpr: Fujitsu, vmware, objective-see, paragon, etc
|
2023-02-18 12:02:40 -08:00 |
ffd552aa54