osquery-defense-kit/detection/credentials
Thomas Stromberg dc154a6199
FPR: Meta Pixel Helper, systemctl, pia-daemon, 1Passwd, iTerm, Brave
2023-01-20 09:04:00 -05:00
..
macos_keyboard_sniffer.sql false positives: dots, ipn, apport-gtk, homebrew, hyperkey, contexts 2023-01-09 09:34:20 -05:00
unexpected-dev-opener-linux.sql FP removal: Selenium, PolKit helper, gephi, docker-credential-gcloud, firejail, etc 2023-01-16 12:56:39 -05:00
unexpected-dev-opener-macos.sql Update interval tags, mostly for persistence 2022-10-14 14:26:49 -04:00
unexpected-sensitive-file-access-linux.sql FPR: Meta Pixel Helper, systemctl, pia-daemon, 1Passwd, iTerm, Brave 2023-01-20 09:04:00 -05:00