chainguard-dev / osquery-defense-kit

Production-ready detection & response queries for osquery

chainguard-dev/osquery-defense-kit Issues

Make a `process_events` port of `hidden_cwd`
Closed a year ago
Make a `socket_events` port of `unexpected-talkers-linux`
Closed a year ago1
Make a `socket_events` port of `unexpected-talkers-macos`
Closed a year ago
Make a `socket_events` port of `unexpected-https-client-linux`
Closed a year ago1
cgroup fields on macOS detections
Closed 2 years ago2
ssh_notty still false-positives for znapzend
Closed 2 years ago