osquery-defense-kit/detection/exfil
2024-01-09 17:22:33 -05:00
..
high_disk_bytes_read.sql fpr: sourcegraph,phantombuster,iterm,cody,stickers 2024-01-09 16:14:00 -05:00
yara-exec-connect-process-linux.sql fpr: Capture One, Grammarly, Mullvad, etc 2023-12-08 17:12:27 -05:00
yara-recently-downloaded-go-crypt-exec.sql recently downloaded go-crypt: Fix YARA error 2024-01-09 17:22:33 -05:00
yara-unexpected-go-crypt-exec-process.sql Add exceptions for Elastic Defend 2024-01-08 17:18:25 -05:00
yara-unexpected-rust-http-exec-process.sql Optimize YARA process queries by deduping paths 2023-11-02 09:53:26 -04:00