osquery-defense-kit/detection/persistence
Thomas Stromberg d74405c817
fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc
2023-06-30 16:38:31 -04:00
..
fake-apple-launchd.sql
low-fd-socket.sql fpr: macOS, yubikey, Premiere, dnf, vagrant, etc 2023-05-23 11:31:37 -04:00
minimal-socket-client-linux.sql minimal socket client: speed query up 2023-06-08 20:44:08 -04:00
minimal-socket-client-macos.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-active-systemd-units.sql Remove file sizes from systemd exception key 2023-06-08 18:26:57 -04:00
unexpected-chrome-extensions.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-cron-entries.sql
unexpected-device.sql fpr: terragrunt, mdnsResponder, Spotify, Zoom, etc 2023-06-14 10:58:41 -04:00
unexpected-global-lock.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-launchd-program-arguments.sql fpr: macOS, Signal, Creative Labs, node, etc 2023-06-07 09:55:17 -04:00
unexpected-launchd-program-macos.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-listening-port-linux.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-listening-port-macos.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-lock-opener.sql fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00
unexpected-small-udev-entry-linux.sql
unexpected-ssh-authorized-keys.sql make reformat 2023-05-08 13:20:47 -04:00
unexpected-systemctl-calls-linux.sql Make process times broadly available, minor opts 2023-05-16 17:18:39 -04:00
unexpected-uid0-daemon-linux.sql fpr: Brave, Adobe, Signal, Kandji, SteelSeries, etc 2023-06-30 16:38:31 -04:00
unexpected-uid0-daemon-macos.sql fpr: Slack, Gnome, Sigstore, Logitune, etc 2023-06-12 10:10:57 -04:00