search

chainguard-dev / bincapz

detect malicious program behaviors
Apache License 2.0
404 stars 26 forks source link

evasion/fake/process/name should be HIGH not CRITICAL #131

Closed tstromberg closed 4 months ago

tstromberg commented 4 months ago

From packages/x86_64/bazel-3-3.7/usr/bin/bazel

exec -a "$0" "${wrapper}" "$@"
exec -a "$0" "${BAZEL_REAL}" "$@"

We should change this to "HIGH" instead of "CRITICAL".