osquery-defense-kit/detection/execution
2022-11-03 11:51:54 -04:00
..
exotic-command-events-linux.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
exotic-command-events-macos.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
exotic-commands.sql noop: Run 'make reformat' 2022-10-21 17:45:43 -04:00
recently-created-executables-linux.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
recently-created-executables-macos.sql False-positive updates: tailscale, snapd, WPILib, darkfiles 2022-11-01 07:15:10 -04:00
reverse-shell-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
sketchy-fetcher-events.sql Reduce false positives 2022-10-20 08:04:24 -04:00
sketchy-fetcher.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
tiny-executable-events.sql Simplify exotic commands queries, remove more false positives 2022-10-18 11:32:18 -04:00
tiny-executable.sql Add exceptions for Steam on Linux 2022-10-30 10:19:33 -04:00
unexpected-env-values-linux.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-env-values-macos.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-execdir-events-linux.sql Decrease poll time to 60 seconds 2022-10-17 17:31:32 -04:00
unexpected-execdir-events-macos.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-execdir-linux.sql Use 'rapid' instead of 'continous' for tagging 2022-10-17 08:43:29 -04:00
unexpected-execdir-macos.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-executable-permissions.sql Apply 'npx sql-formatter -l sqlite' 2022-10-17 19:06:17 -04:00
unexpected-gatekeeper-approvals-macos.sql Fix platform name: darwin instead of macos 2022-10-21 17:39:35 -04:00
unexpected-mounts.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-osascript-calls.sql Make another stab at reducing false positives across the map 2022-11-03 11:51:54 -04:00
unexpected-raw-socket.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
unexpected-setuid-binaries.sql Add support for interval tags 2022-10-14 14:19:13 -04:00
xprotect-reports.sql Add support for interval tags 2022-10-14 14:19:13 -04:00