| .. |
|
fake-apple-launchd.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
|
unexpected-active-systemd-units.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-chrome-extensions.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
|
unexpected-launchd-program-arguments.sql
|
Monday morning false-positive purge
|
2023-02-08 14:37:09 -05:00 |
|
unexpected-launchd-program-macos.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-listening-port-linux.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-listening-port-macos.sql
|
fpr: My ORA, Ecamm, setroubleshootd, etc
|
2023-02-14 19:46:36 -05:00 |
|
unexpected-small-udev-entry-linux.sql
|
Refactor process_events queries for more accurate parenting
|
2023-01-26 11:40:54 -05:00 |
|
unexpected-ssh-authorized-keys.sql
|
New detector: unexpected ssh-authorized-keys
|
2023-02-14 20:36:27 -05:00 |
|
unexpected-systemctl-calls-linux.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-uid0-daemon-linux.sql
|
False positive flush, particularly in talkers
|
2023-02-17 11:57:23 -05:00 |
|
unexpected-uid0-daemon-macos.sql
|
Query performance improvements, add pids, decrease frequency
|
2023-02-09 17:01:29 -05:00 |
