Update discovering-geacon-using-fleet.md (#11799)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
This commit is contained in:
Andrew Baker 2023-05-19 10:23:24 -04:00 committed by GitHub
parent 429df05e3c
commit f655e12b0c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -163,4 +163,4 @@ These rules do not persist across reboots. If you want these rules to persist af
<meta name="category" value="guides">
<meta name="publishedOn" value="2023-05-18">
<meta name="articleImageUrl" value="../website/assets/images/articles/discovering-geacon-using-fleet-1600x900@2x.jpg">
<meta name="description" value="Geacon, a Go implementation of Cobalt Strike, is a new threat to macOS devices. Enterprise security teams can use Fleet to identify and locate Geacon payloads and protect their macOS devices from this threat.">
<meta name="description" value="Enterprise security teams can use Fleet to identify and locate Geacon payloads and protect their macOS devices from this threat.">