osquery-defense-kit/detection/persistence
2023-01-23 08:13:04 -05:00
..
fake-apple-launchd.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00
unexpected-active-systemd-units.sql False positives: apt-daily, github runner, Slack helper, Foxit, syncthing 2023-01-19 11:52:31 -05:00
unexpected-chrome-extensions.sql FPR: Meta Pixel Helper, systemctl, pia-daemon, 1Passwd, iTerm, Brave 2023-01-20 09:04:00 -05:00
unexpected-cron-entries.sql False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc 2022-11-18 10:27:43 -05:00
unexpected-launchd-program-arguments.sql Run 'make reformat' 2023-01-20 09:24:24 -05:00
unexpected-launchd-program.sql Flush out more false positives across the stack 2023-01-06 10:36:48 -05:00
unexpected-listening-port-linux.sql fpr: systemctl calls, go tests, WebEx, MariaDB, Brave 2023-01-20 17:55:48 -05:00
unexpected-listening-port-macos.sql listening ports: Add goland exception 2023-01-20 10:00:40 -05:00
unexpected-small-udev-entry.sql New Years cleanup: monitorix, snap-confine, steam, spotify, etc 2023-01-03 08:50:19 -05:00
unexpected-systemctl-calls.sql fpr: libinput, kue, updatedb, mariadb, terraform 2023-01-23 08:13:04 -05:00
unexpected-uid0-daemon-linux.sql Less false positives: particularly among systemctl calls 2023-01-20 08:40:08 -05:00
unexpected-uid0-daemon-macos.sql Add a lot more mitre data 2022-10-19 16:56:32 -04:00