mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
14 lines
333 B
YAML
14 lines
333 B
YAML
|
name: suid_bin
|
||
|
|
examples: >-
|
||
|
|
Identify unsigned executables with suid privileges.
|
||
|
|
|
||
|
|
```
|
||
|
|
|
||
|
|
SELECT s.path, s.username, s.permissions, sig.signed, sig.team_identifier, sig.authority FROM suid_bin s JOIN signature sig on s.path = sig.path WHERE sig.signed='0';
|
||
|
|
|
||
|
|
```
|
||
|
|
columns:
|
||
|
|
- name: pid_with_namespace
|
||
|
|
platforms:
|
||
|
|
- linux
|