Blocking execution of Malicious PSQL script to update postgres database using EDR

3 replies
428 views

Greetings,

I am reaching out for help on how to block malicious PostgreSQL scripts/commands like disabling database triggers, updating and deleting database records targeting PostgreSQL hosted in a Linux server.

FortiEDR

Stephen_G

Staff & Editor

Hi Echumba,

Thanks for using our forum! We'll look to get you an answer as soon as we can.

If anyone reading this has any ideas, feel free to contribute!

Stephen_G - Fortinet Community Team

Stephen_G

Staff & Editor

Hi Echumba,

Sorry it's taken so long to get you an answer. We're still looking.

Stephen_G - Fortinet Community Team

Luke_FTNT

Staff

Hi Evans,

Luke here from FortiEDR support. I'm afraid that level of database granularity does not exist in FortiEDR. Application Control would allow for the denial of execution for defined processes, but not specific commands or actions within those processes/services.

Cheers,

-Luke

Sign up

Login with SSO

Login to the community

Login with SSO