osquery-defense-kit/detection/persistence
Thomas Stromberg 1b79359b68
Friday False Positive Flush
2023-01-13 14:10:43 -05:00
..
fake-apple-launchd.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-active-systemd-units.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-chrome-extensions.sql Remove false positives, fix some queries that failed to show a parent pid 2023-01-09 10:46:30 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Another false positive flush: Capital One, tailscaled, agetty, snap, ninja, epson printers, etc 2022-12-15 16:51:58 -05:00
unexpected-launchd-program.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-listening-port-linux.sql Catch up to other false positives over winter break 2023-01-04 11:03:38 -05:00
unexpected-listening-port-macos.sql Friday False Positive Flush 2023-01-13 14:10:43 -05:00
unexpected-small-udev-entry.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
unexpected-uid0-daemon-linux.sql More false positive removal 2023-01-06 16:01:35 -05:00
unexpected-uid0-daemon-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00