valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-08 02:18:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #1674 from sharvilshah/update_pack_query

Browse Source 
Update wireless_networks in IR pack to use wifi_networks table
This commit is contained in:
Teddy Reed 2015-11-22 22:29:56 -08:00
commit c558a78764
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
packs/incident-response.conf
View File

@ -257,10 +257,10 @@
"value" : "Determine if MITM in progress."
},
"wireless_networks": {
"query" : "select key, subkey, value from preferences where path = '/Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist';",
"query" : "select ssid, network_name, security_type, last_connected, captive_portal, possibly_hidden, roaming, roaming_profile from wifi_networks;",
"interval" : "3600",
"platform" : "darwin",
"version" : "1.4.5",
"version" : "1.6.0",
"description" : "Retrieves all the remembered wireless network that the target machine has connected to.",
"value" : "Identifies connections to rogue access points."
},