mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2024-12-13 09:34:34 +00:00
5 lines
163 B
SQL
5 lines
163 B
SQL
-- -- https://posts.specterops.io/hunting-for-bad-apples-part-2-6f2d01b1f7d3
|
|
SELECT * FROM gatekeeper_approved_apps
|
|
WHERE
|
|
path NOT LIKE "/Users/%/code/bin/protoc"
|