Tech notes
seek to understand the question
  • Home
  • Posts
  • OSQuery
  • query-index
  • About
  • Privacy
  1. Home
  2. OSquery

55808.a Worm

OSquery
select * from file where path in ('/tmp/.../a', '/tmp/.../r');
View Full Query Details

Acpi Tables

OSquery
select * from acpi_tables;
View Full Query Details

Ad Config

OSquery
select * from ad_config;
View Full Query Details

Adore Rootkit

OSquery
select * from file where path in ('/etc/bin/ava', '/etc/sbin/ava');
View Full Query Details

Adore Worm

OSquery
select * from file where path in ('/dev/.shit/red.tgz', '/usr/lib/libt', '/usr/bin/adore');
View Full Query Details

Ajakit Rootkit

OSquery
select * from file where path in ('/lib/.ligh.gh', '/lib/.libgh.gh', '/lib/.libgh-gh', '/dev/tux', '/dev/tux/.proc', '/dev/tux/.file');
View Full Query Details

Alf

OSquery
select * from alf;
View Full Query Details

Alf Exceptions

OSquery
select * from alf_exceptions;
View Full Query Details

Alf Explicit Auths

OSquery
select * from alf_explicit_auths;
View Full Query Details

Alf Services

OSquery
select * from alf_services;
View Full Query Details
1 2 3… 27 Next

Recent Posts

  • Connect private network to AWS using ZeroTier
  • Using kitchen-salt for testing salt-formulas
  • RPM package creation for BRO IDS Deployments
  • Installing pf_ring on CentOS 7 using yum
  • Using a systemd.service file to control promiscuous mode automatically at boot

Platforms

  • darwin 32
  • linux 65
  • posix 21
  • windows 4

Categories

  • Linux 25
  • Logging 14
  • NSM 1
  • Open Source 3
  • OSquery 269
  • SaltStack 4
  • Security 15
  • Sys Admin 30
  • VMware 2

Archives

  • September 2019 1
  • August 2019 1
  • July 2018 2
  • February 2018 1
  • April 2017 1
  • January 2017 1
  • December 2016 8
  • June 2016 1
  • January 2016 5
  • February 2015 11

Post Series

  • Setting up a multi-tiered log infrastructure
  • Setup internal yum repositories for CentOS and RedHat Servers
© 2025 Tech notes. Generated with Hugo and a heavily modified Roadster theme.