osquery-defense-kit/detection
Dave Smith ca768ca4fa fpr: mostly uid0 things 2024-11-12 07:37:29 -05:00
..
c2 fpr: mostly uid0 things 2024-11-12 07:37:29 -05:00
collection
credentials Add deskflow-server and additional repos directory 2024-10-30 10:28:00 -05:00
discovery
evasion fpr: zypper, bambu, terraform, etc 2024-11-08 07:34:33 -05:00
execution Add rules for bambu-studio, extensions, firefox-bin, goland, xdg, and more 2024-11-01 14:27:33 -05:00
exfil
impact
initial_access More exceptions to cut down on alert noise 2024-10-31 15:47:35 -05:00
persistence fpr: mostly uid0 things 2024-11-12 07:37:29 -05:00
privesc