osquery-defense-kit/detection
Thomas Stromberg d039449330
Add new Kolide signing authority as a valid talker
2023-02-02 19:50:13 -05:00
..
c2 Add new Kolide signing authority as a valid talker 2023-02-02 19:50:13 -05:00
collection fpr: Parallels, nerdctl, Xorg, nvidia, Stream, etc 2023-01-26 20:40:47 -05:00
credentials Fix broken macOS queries 2023-02-02 15:33:25 -05:00
discovery Fix broken macOS queries 2023-02-02 15:33:25 -05:00
evasion macOS: Add exceptions for AppleInstallType.plist & osquery 2023-02-02 16:36:17 -05:00
execution macOS: Add exceptions for AppleInstallType.plist & osquery 2023-02-02 16:36:17 -05:00
exfil fpr: New Chrome etxensions, vbox, chrome, gcloud, gdm3, yay, etc 2023-01-30 14:58:47 -05:00
impact fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc 2023-01-23 20:33:52 -05:00
initial_access Fix broken macOS queries 2023-02-02 15:33:25 -05:00
persistence Fix broken macOS queries 2023-02-02 15:33:25 -05:00
privesc Update for osqtool v1.0 2023-02-02 12:04:26 -05:00