osquery-defense-kit/detection/execution
2022-10-17 17:10:51 -04:00
..
exotic-command-events-linux.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
exotic-command-events-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
exotic-commands.sql Add lost files from the rename 2022-10-14 14:19:32 -04:00
recently-created-executables.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
reverse-shell-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher-events.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
tiny-executable-events.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
tiny-executable.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-env-values-linux.sql Split env-values is case it helps decrease CPU time 2022-10-17 17:10:51 -04:00
unexpected-env-values-macos.sql Split env-values is case it helps decrease CPU time 2022-10-17 17:10:51 -04:00
unexpected-execdir-events-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-events-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-execdir-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-macos.sql Add lost files from the rename 2022-10-14 14:19:32 -04:00
unexpected-executable-permissions.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-gatekeeper-approvals-macos.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-mounts.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-osascript-calls.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-raw-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-setuid-binaries.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
xprotect-reports.sql Add support for interval tags 2022-10-14 14:19:13 -04:00