.. |
fake-apple-launchd.sql
|
Run make reformat, update max rows for incident response
|
2023-02-02 17:58:19 -05:00 |
unexpected-active-systemd-units.sql
|
fpr: Docker, Zwift, macOS updates, etc
|
2023-03-20 17:05:02 -04:00 |
unexpected-chrome-extensions.sql
|
fpr: Docker, Zwift, macOS updates, etc
|
2023-03-20 17:05:02 -04:00 |
unexpected-cron-entries.sql
|
False positives: melange, ~/dev, debian-sa1, AdBlock, cover, kubelr, etc
|
2022-11-18 10:27:43 -05:00 |
unexpected-device.sql
|
fpr: Docker, Zwift, macOS updates, etc
|
2023-03-20 17:05:02 -04:00 |
unexpected-launchd-program-arguments.sql
|
fpr: yum, systemd, cloud-sql-proxy, image-automation-controller, helm, bom, aws
|
2023-03-14 19:00:44 -04:00 |
unexpected-launchd-program-macos.sql
|
Add exceptions for Kandji
|
2023-03-17 15:46:00 -04:00 |
unexpected-listening-port-linux.sql
|
fpr: Signal, apko, aws, melange, dash, stern
|
2023-03-16 17:29:11 -04:00 |
unexpected-listening-port-macos.sql
|
fpr: aws-sdk, melange, Tailscale, Xprotect, etc
|
2023-03-03 07:24:42 -05:00 |
unexpected-small-udev-entry-linux.sql
|
Remove ubuntu-lts false-positives on lima
|
2023-02-20 19:10:12 -05:00 |
unexpected-ssh-authorized-keys.sql
|
Remove ubuntu-lts false-positives on lima
|
2023-02-20 19:10:12 -05:00 |
unexpected-systemctl-calls-linux.sql
|
fpr: NetworkManager, packer, rancher desktop, proxmox, sd
|
2023-03-17 06:32:54 -04:00 |
unexpected-uid0-daemon-linux.sql
|
revert euid change in exception key
|
2023-03-16 17:31:31 -04:00 |
unexpected-uid0-daemon-macos.sql
|
Add exceptions for Kandji
|
2023-03-17 15:46:00 -04:00 |