Mark as extra, as this query is racey

chainguard-dev · Oct 24, 2024 · 462fbef · 462fbef
1 parent bf8b60c
commit 462fbef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/detection/execution/unexpected-fetcher-parents.sql b/detection/execution/unexpected-fetcher-parents.sql
@@ -3,7 +3,7 @@
 -- refs:
 --   * https://attack.mitre.org/techniques/T1105/ (Ingress Tool Transfer)
 --
--- tags: transient process state often
+-- tags: transient process state often extra
 -- platform: posix
 SELECT
   p.pid,