[tuning] Connection to Commonly Abused Web Services (#3901)

* Update command_and_control_common_webservices.toml

* Update command_and_control_common_webservices.toml

---------

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
This commit is contained in:
Samirbous
2024-07-18 13:59:53 +01:00
committed by GitHub
parent 1384742f07
commit 6ac278df0c
@@ -2,7 +2,7 @@
creation_date = "2020/11/04"
integration = ["endpoint"]
maturity = "production"
updated_date = "2024/05/21"
updated_date = "2024/07/16"
[transform]
[[transform.osquery]]
@@ -217,7 +217,9 @@ network where host.os.type == "windows" and network.protocol == "dns" and
"*.zulipchat.com",
"webhook.site",
"run.mocky.io",
"mockbin.org") and
"mockbin.org",
"www.googleapis.com",
"googleapis.com") and
/* Insert noisy false positives here */
not (