osquery-defense-kit/detection/initial_access
2023-02-14 08:33:05 -05:00
..
sketchy-mounted-diskimage.sql fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc 2023-02-14 08:33:05 -05:00
unexpected-diskimage-name-macos.sql fpr: Github Absolute Date, Snagit, Figma, Seagate, aws, etc 2023-01-26 16:30:14 -05:00
unexpected-diskimage-source-macos.sql Massive reduction of false positives across the board 2023-02-08 20:06:26 -05:00
unexpected-shell-parent-events.sql fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc 2023-02-14 08:33:05 -05:00
unexpected-shell-parents.sql fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc 2023-02-14 08:33:05 -05:00
unexpected-volume-contents.sql fpr: Nessus, mysql-shell, ntia-checker, Ecamm, CopyClip, etc 2023-02-14 08:33:05 -05:00
unexpected-webmail-downloads.sql Massive reduction of false positives across the board 2023-02-08 20:06:26 -05:00