| .. |
|
fake-apple-launchd.sql
|
Add a lot more mitre data
|
2022-10-19 16:56:32 -04:00 |
|
unexpected-active-systemd-units.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-chrome-extensions.sql
|
fpr: minikube, tailscale, dex, pacman, virtualbox, steam, lsmod, busybox, etc
|
2023-01-23 20:33:52 -05:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-launchd-program-arguments.sql
|
Run 'make reformat'
|
2023-01-20 09:24:24 -05:00 |
|
unexpected-launchd-program-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-small-udev-entry-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-systemctl-calls-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-uid0-daemon-linux.sql
|
Less false positives: particularly among systemctl calls
|
2023-01-20 08:40:08 -05:00 |
|
unexpected-uid0-daemon-macos.sql
|
Add a lot more mitre data
|
2022-10-19 16:56:32 -04:00 |
f5fe9a4aac