osquery-defense-kit/detection/persistence
2023-01-09 09:34:20 -05:00
..
fake-apple-launchd.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-active-systemd-units.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-chrome-extensions.sql Catch up to some older false positives we ran into 2023-01-06 17:11:24 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Another false positive flush: Capital One, tailscaled, agetty, snap, ninja, epson printers, etc 2022-12-15 16:51:58 -05:00
unexpected-launchd-program.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-listening-port-linux.sql Catch up to other false positives over winter break 2023-01-04 11:03:38 -05:00
unexpected-listening-port-macos.sql false positives: dots, ipn, apport-gtk, homebrew, hyperkey, contexts 2023-01-09 09:34:20 -05:00
unexpected-small-udev-entry.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
unexpected-uid0-daemon-linux.sql More false positive removal 2023-01-06 16:01:35 -05:00
unexpected-uid0-daemon-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00