osquery-defense-kit/detection/privesc
Thomas Stromberg 0202e87b73
fpr: libopenblas, snapd, k3d, opera, nix, ssh, cargo, adobe installer
2023-05-03 16:28:00 -04:00
..
docker-container-mounting-root.sql Query performance improvements, add pids, decrease frequency 2023-02-09 17:01:29 -05:00
setxid-cmdline-overflow-attempt.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
setxid-env-overflow-attempt.sql Run make reformat, update max rows for incident response 2023-02-02 17:58:19 -05:00
sketchy-docker-image-creator.sql Query performance improvements, add pids, decrease frequency 2023-02-09 17:01:29 -05:00
unexpected-elevated-children-events_linux.sql fpr: more refactor fallout 2023-04-28 14:40:12 -04:00
unexpected-elevated-children-events_macos.sql fpr: microbit, i3, Grammarly for Safari, wine 2023-05-02 17:49:53 -04:00
unexpected-privilege-escalation_linux.sql fpr: RetailMeNot, LogiTune, macOS, mediawriter, etc 2023-05-02 15:25:36 -04:00
unexpected-privilege-escalation_macos.sql fpr: Canon Universal Installer, melange, GPG, key names 2023-03-06 15:11:11 -05:00
unexpected-privileged-containers.sql fpr: libopenblas, snapd, k3d, opera, nix, ssh, cargo, adobe installer 2023-05-03 16:28:00 -04:00
unexpected-setxid-process.sql fpr: yum, systemd, cloud-sql-proxy, image-automation-controller, helm, bom, aws 2023-03-14 19:00:44 -04:00