swap extra tag between udev and systemd

chainguard-dev · Sep 23, 2024 · d14d542 · d14d542
1 parent 5255539
commit d14d542
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/detection/persistence/suspicious-systemd-unit.sql b/detection/persistence/suspicious-systemd-unit.sql
@@ -8,7 +8,7 @@
 -- false positives:
 --   * home-made systemd files
 --
--- tags: persistent filesystem systemd
+-- tags: persistent filesystem systemd extra
 -- platform: linux
 SELECT
   file.path,

diff --git a/detection/persistence/suspicious-udev-runner-linux.sql b/detection/persistence/suspicious-udev-runner-linux.sql
@@ -4,7 +4,7 @@
 --  * https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp
 --  * https://ch4ik0.github.io/en/posts/leveraging-Linux-udev-for-persistence/
 --
--- tags: volume filesystem extra
+-- tags: volume filesystem
 -- platform: linux
 SELECT
   file.path,