[MacPorts] #69187: Updated from version 2.8.1 to 2.9 Crowdstrike altert from IT
MacPorts
noreply at macports.org
Thu Jan 25 17:02:30 UTC 2024
#69187: Updated from version 2.8.1 to 2.9 Crowdstrike altert from IT
-------------------------+-------------------------------------------
Reporter: eraldtroja | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: base | Version: 2.9.0
Resolution: | Keywords: crowdstrike alerts, data dump
Port: |
-------------------------+-------------------------------------------
Description changed by ryandesign:
Old description:
> I can provide more details as I get them from IT but in a nutshell this
> has occurred and I need some guidance.
>
> I was at version 2.8.1 as of yesterday morning. I fired up the following
> commands to update my ports:
>
> sudo port selfupdate
> sudo port upgrade outdated
> sudo port uninstall inactive
>
> I'm running MacOS Sonoma 14.3. The system is managed by my IT
> department.
>
> Within minutes of performing the update I received calls from IT stating
> that Crowdstrike had alerted them of a data dump, hence my machine would
> need to be brought in for a complete wipe.
>
> I think this might be a case of a false positive, and I'll provide more
> details if needed, but I need to get some guidance of what an update from
> 2.8.1 to 2.9 does in order to possible categorize it as a false positive
> when it comes to a "data dump"
>
> Thank you.
New description:
I can provide more details as I get them from IT but in a nutshell this
has occurred and I need some guidance.
I was at version 2.8.1 as of yesterday morning. I fired up the following
commands to update my ports:
{{{
sudo port selfupdate
sudo port upgrade outdated
sudo port uninstall inactive
}}}
I'm running MacOS Sonoma 14.3. The system is managed by my IT department.
Within minutes of performing the update I received calls from IT stating
that Crowdstrike had alerted them of a data dump, hence my machine would
need to be brought in for a complete wipe.
I think this might be a case of a false positive, and I'll provide more
details if needed, but I need to get some guidance of what an update from
2.8.1 to 2.9 does in order to possible categorize it as a false positive
when it comes to a "data dump"
Thank you.
--
--
Ticket URL: <https://trac.macports.org/ticket/69187#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list