# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
Closes: #10458
Changes:
- Updated the generated id's for headings in Markdown content to remove
extra dashes in words that have multiple letter casings (e.g., `#my-sql`
» `#mysql`, `#git-hub-security` » `#github-security`)
- Updated links to Markdown headings that have changed.
. ..
---------
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---------
Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---------
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
Changes:
- Fixed the `articleImageUrl` meta value of the 4.28.0 release notes
- Replaced a link to an image
- replaced links to youtube videos with embedded video players
Issue: https://github.com/fleetdm/fleet/issues/9913
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---------
Co-authored-by: Jarod Reyes <jarodreyes@gmail.com>
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---------
Co-authored-by: Eric <eashaw@sailsjs.com>
Changes:
- Changed the name of the `type` prop of the `<call-to-action>`
component to `preset`
- Updated `<call-to-action>` components in articles to use the new prop
name
- Updated the article formatting guide in the Handbook to document how
to use a `<call-to-action>` preset and added examples of our two
presets.
Added a note concerning the changes to osquery packs
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
Closes: #9786
Changes:
- Updated the <call-to-action> component to add support for a new prop:
`type`. This can be set to `premium-upgrade` or `mdm-beta`. If this prop
is provided, the component will render a call to action for the limited
MDM beta or Fleet Premium.
- Example usage: `<call-to-action type="mdm-beta"></call-to-action>`
- Added a CTA for upgrading to Fleet premium to the `Fleet 4.27.0`
release article
- Added a CTA for the MDM beta to the `Fleet 4.26.0` release article
Found a few typos before publishing on socials - fixed
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
adding new article for splunk , osquery, mitre attck
---------
Co-authored-by: Dave Herder <dave@fleetdm.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Changed some wording under "Deployments" to remove confusion, and
updated instructions for "Prepare the database" to better reflect the
previous outputs from the terraform apply.
Co-authored-by: Katheryn Satterlee <me@ksatter.com>
* Update deploying-fleet-on-aws-with-terraform.md
Changed title to be consistent with other deployment guides.
* Update deploying-fleet-on-render.md
Changed title to be consistent with other deployment guides.
* Update deploy-fleet-on-hetzner-cloud.md
Changed title to remove the ampersand and make "Cloud-init" lowercase.
* Remove email address for redudancy
Call to actions at the bottom of the page offer better forms of communication to join the community, trial Fleet, or ask questions.
* Remove email mention
* Remove email mention
* Remove email mention
* Fleet podcast episode 7 images upload
* Initial article post
Still need to update podbean links once available
* Removing due to incorrect title
* Removing due to incorrect title
* Reuploading correct thumbnails
* Update the-future-of-device-management-ep7.md
* Updated podbean link
* Unused image - removing
* Update articles/the-future-of-device-management-ep7.md
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
* Update articles/the-future-of-device-management-ep7.md
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
* Update the-future-of-device-management-ep7.md
* Update articles/the-future-of-device-management-ep7.md
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
* update deployment guide and add additional descriptions/comments for terraform resources
* add architecture diagram to deployment guide
* cleaning up more terraform deployment documentation
- Rename "Osquery logs" page to "Log destinations"
- Use exact product names in the log destination docs
- Move anchor links to the top of the page so that fleetdm.com/docs/log-destinations renders a sidebar
* Create zero-trust-attestation-with-fleet
* Added images
I made the following changes:
- added .md file extension
- added artwork for the article
* Image update
- updated thumbnail image
- moved position of zero touch diagram
* Added file extension
* Added revisions from Google doc
Incorporated revisions I had been discussing with Mo.
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
* Article: osquery vulnerability management at scale
Zach's presentation from osquery@scale September 2022. Slides are embedded in the article. Video will be added when available.
* Add embed for google slides presentation
* Update osquery-vulnerability-management-at-scale.md
Added link to osquery@scale website. Removed placeholder hero image.
* Add thumbnail image
- added a thumbnail image
- changed "Osquery" to "osquery"
* Updated intro and publication date
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
* Guide for osquery event tables
* add list for how you can tell a table is evented
* Update osquery-evented-tables-overview.md
* Update osquery-evented-tables-overview.md
* Update osquery-evented-tables-overview.md
* Update osquery-evented-tables-overview.md
* Update osquery-evented-tables-overview.md
* Include new information about the other tables
* Clarify how audit works w/r/t data storage
* macOS and Linux
* specify flags for user_interaction_events table
* remove screenshot image
* remove subbullets in TOC
* redefine utility
* memtion openbsm is deprecated
* fix TOC links
* add meta tags
* Article: Osquery as a threat hunting platform
* Add .md to title
We need to define the file type in the title. These articles are structured in markdown, so we add ".md" to the title.
* Add metadata
Reminder to change publishing date and article image once we have it.
* Making copy less formal
Simplified language and provided more context for osquery being a lightweight agent.
* Add images and meta tags
I made the following updates to this article:
- Added images.
- Updated category to "Security".
* Osquery threat hunting article revisions.md
Revised copy for simplicity and flow. Added a link to the first podcast episode. Followed @mike-j-thomas's suggestion to mention value of osquery managers.
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
* Create introducing-sandbox:-the-fastest-way-to-play-with-fleet.md
* Update articles/introducing-sandbox:-the-fastest-way-to-play-with-fleet.md
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
* added image and video
- added image and video
- updated meta tags
* Update introducing-sandbox:-the-fastest-way-to-play-with-fleet.md
- removed comma from meta tag title
* Rename file, update quotation marks
Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
- Update "Learn how to use Fleet" docs page to walk a Fleet Sandbox user through adding their device and running a query
- Add a "Get operating system information" query to standard query library for the "Learn how to use Fleet" walkthrough
- Update Fleet's top level README to point users who want to try Fleet to Fleet Sandbox
- Update "How to install osquery..." (macOS, Windows, Linux) blog posts to point users who want to try Fleet to Fleet Sandbox
- Move `fleetctl preview` questions to "Contributing" FAQ section in docs. This is because `fleetctl preview` is now a testing tool for Fleet contributors
- Update "Deploying" docs to point users who want to try Fleet to Fleet Sandbox
* Update tales-from-fleet-security-google-groups-scams.md
Updated blockquote type to the new <purpose="large-quote">
* Update tales-from-fleet-security-google-groups-scams.md
added strong tags
Co-authored-by: Guillaume Ross <guillaume@fleetdm.com>
* Google Groups spam article for 6914
Creating the file in which the Google Groups spam article for #6914 will go.
* Google Groups Blog Post: Renaming file + submitting early draft and image
* Reverting accidental update to vscode settings
Reverting accidental update to vscode settings in blog post PR
* Formatting for Google Groups scam post
* added article images
- added cover image and updated inline image to a higher res version (and re-composed).
- fixed a stray typo and also rephrased the sentence for clarity.
* Apply suggestions from code review
Fixing as per Des's suggestions.
Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
* Update tales-from-fleet-security-google-groups-scams.md
Making it more obvious the quotes were quotes from Google support
* Quick typo fix
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
* remove reference to fleet desktop being in beta
* update how to generate a new Fleet Desktop installer
* document --disable-update and --desktop-channel flags
* new file for Fleet Desktop
* fleet desktop custom transparency link explanation
* docs for installing and upgrading Fleet Desktop
* fleet desktop out of beta announcement blog
* images
* copy edits
* convert headers to sentence case
* incorporate copy changes
* Updated images and meta tags
- I updated the images, and renamed to match our image naming conventions
- I added the article meta tags
* Update Fleet-desktop.md
* Specify Fleet Desktop document order
* Update to fleet-desktop-says-hello-world.md
- I added a screencast showing how to remediate a failing policy with Fleet Desktop
- I added inline styles so that the video fills the container width and renders correctly on mobile.
- I re-jigged "self remediation" and "Scope transparency" as H3 tags.
* address some typos and style changes
* update meta tag
* remove single quotes
* Update publishing date fleet-desktop-says-hello-world
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
* Style fix - tales-from-fleet-security-securing-bank-accounts-from-business-email-compromise.md
- Removed checkboxes from the checklist because they are not rendering correctly.
- I noticed that checkboxes could benefit from a little extra margin to the right.
* revert whitespace change to bootstrap-overrides
Co-authored-by: Eric <eashaw@sailsjs.com>
* Add top view image for 3d printed yubikey cases
* update filename extension in article, move image to images/articles
Co-authored-by: Eric <eashaw@sailsjs.com>
* Update publishing date for Linux vulnerability detection article
Changing from 08-29 to 07-29
* Added mermaid diagram
- added mermaid diagram and updated diagram background colour.
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
* update image on podcast ep3
- Updated image on the-future-of-device-management-ep3.md
- Updated title for consistency on the-future-of-device-management-ep1.md
* Fixed meta name article title to "episode 3"
Co-authored-by: Tim Kern <tim@fleetdm.com>
* Add future of device management podcast episode 3
Will need to keep an eye out for podcast to be available on spotify and apple
* Adding Fleet podcast episode 3 image
* Updating Embed code and podcast links
* add deploy category, change product to guides
* update links to deployment guides
* Update deploy-fleet-on-hetzner-cloud.md
* Update enrolling-a-digital-ocean-droplet-on-a-fleet-instance.md
* Update how-to-install-osquery-and-enroll-linux-devices-into-fleet.md
* Update delivering-data-to-snowflake-from-fleet-and-osquery.md
* Update how-to-install-osquery-and-enroll-windows-devices-into-fleet.md
* Update how-to-install-osquery-and-enroll-macos-devices-into-fleet.md
* Update deploying-fleet-on-aws-with-terraform.md
* Update deploying-fleet-on-render.md
* Update how-to-uninstall-osquery.md
* Update osquery-a-tool-to-easily-ask-questions-about-operating-systems.md
* Update get-and-stay-compliant-across-your-devices-with-fleet.md
* Update work-may-be-watching-but-it-might-not-be-as-bad-as-you-think.md
* Update converting-unix-timestamps-with-osquery.md
* Update correlate-network-connections-with-community-id-in-osquery.md
* Update using-elasticsearch-and-kibana-to-visualize-osquery-performance.md
* Update fleet-quick-tips-querying-procdump-eula-has-been-accepted.md
* Update locate-assets-with-osquery.md
* Update osquery-consider-joining-against-the-users-table.md
* Update import-and-export-queries-and-packs-in-fleet.md
* Update ebpf-the-future-of-osquery-on-linux.md
* Update generate-process-trees-with-osquery.md
* Update get-and-stay-compliant-across-your-devices-with-fleet.md
* Update work-may-be-watching-but-it-might-not-be-as-bad-as-you-think.md
* Update ebpf-the-future-of-osquery-on-linux.md
* Change category meta value back to guides
Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
* change article category
* update latest article category
* add redirects for articles not handled by cloudflare rules
* Update to main nav
I did a little more housekeeping on the main nav for when we do the switch on these categories.
- Added link to /deploy under Guides on the Documentation dropdown.
- Added link to /guides under Guides on the Documentation dropdown
- Removed the now redundant "See all" from under Guides on the Documentation dropdown
- Removed the now redundant "See all" from under Articles on the Community dropdown (There's no need to point users to All categories any more, since all the category land are now linked to independently from the main nav.
* Update article category name
Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
