Blocking execution of Malicious PSQL script to update postgres database using EDR

[Echumba]

Greetings,

I am reaching out for help on how to block malicious PostgreSQL scripts/commands like disabling database triggers, updating and deleting database records targeting PostgreSQL  hosted in a Linux server.

[Stephen_G]

Hi Echumba,

Thanks for using our forum! We'll look to get you an answer as soon as we can.

If anyone reading this has any ideas, feel free to contribute!

[Stephen_G]

Hi Echumba,

Sorry it's taken so long to get you an answer. We're still looking.

[Luke_FTNT]

Hi Evans,

Luke here from FortiEDR support. I'm afraid that level of database granularity does not exist in FortiEDR. Application Control would allow for the denial of execution for defined processes, but not specific commands or actions within those processes/services.

Cheers,

-Luke