Commit Graph

34 Commits

Author SHA1 Message Date
Guillaume Ross
4f8847ddd2
Adding new policy to check for MDM enrollment (#4343) 2022-03-03 14:22:23 -05:00
eashaw
0af5e161d0
Remove numbers from documentation filenames in Fleet repo (#4313)
* Renaming files and a lot of find and replace

* pageRank meta tags, sorting by page rank

* reranking

* removing numbers

* revert changing links that are locked to a commit

* update metatag name, uncomment github contributers

* Update basic-documentation.page.js

* revert link change

* more explicit errors, change pageOrderInSection numbers, updated sort

* Update build-static-content.js

* update comment

* update handbook link

* handbook entry

* update sort

* update changelog doc links to use fleetdm.com

* move standard query library back to old location, update links/references to location

* revert unintentional link changes

* Update handbook/community.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2022-02-23 12:17:55 -06:00
RachelElysia
50b71106db
Fix typos "included" to "include" (#4234) 2022-02-16 12:41:11 -05:00
Guillaume Ross
e68ff05243
Cleaning up standard library (#4215)
First cleanup as a part of #4212.
2022-02-15 15:43:16 -05:00
Guillaume Ross
531ef1eddc
Adding disk encryption policy query for Linux (#4211)
On website + constants.ts. Does not support all Linux encryption scenarios, we will add more to this query as we discover the patterns people need.

Closes #4208
2022-02-15 14:35:11 -05:00
Guillaume Ross
2378db08c8
3946-Adding antivirus queries (#4154)
* Adding antivirus queries

Adding 3 antivirus queries in the form of an information query as well as in the form of policy queries

* Update standard-query-library.yml

Adding newline at end of file
2022-02-14 14:35:22 -05:00
Noah Talerman
9c24c7d92c
Add policy templates to standard query library (#3956)
* Add remaining policy templates

* Removeempty resolution field

* Update naming for standard policies

* Add enabled word to SIP policy

* Use full SIP

* Also change in constants

* Update windows disk encryption

* Add changes file

* Tweak windows disk encryption policy

* Address lint errors

* Make requested changes

* Reflect changes in policy tempaltes

* Make sure that standard policies and policy templates are the same

* Edit automatic login disabled description

* Also edit in constants
2022-02-10 12:34:30 -05:00
Zach Wasserman
cb4171aa84
Add quoting around string in query library using colon (#4076) 2022-02-07 18:27:50 -08:00
Kelvin Oghenerhoro Omereshone
772457516d
fix: update Filevault to FileVault (#4072) 2022-02-08 02:31:56 +01:00
Kelvin Oghenerhoro Omereshone
6e7c14faef
fix: add warning to query to find log4j vulnerabilities (#4070)
* fix: add warning to query to find log4j vulnerabilities

* Update docs/01-Using-Fleet/standard-query-library/standard-query-library.yml

Co-authored-by: Zach Wasserman <zach@fleetdm.com>

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-02-08 01:15:27 +01:00
eashaw
243306de02
Add tags to standard query library and fleetdm.com/queries (#3970)
* handle query tags in build-static-content script, update query readme

* show tags in query library, add ability to filter by tags

* fix lint errors

* update mobile styles

* fix CTA link

* update mobile layout

* remove tag line-height and font size

* Update build-static-content.js

* Style update

* remove margin from selected tag, adjust OS logo placement

* requested changes from code review

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
2022-02-03 15:49:36 -06:00
Noah Talerman
7dafc5ab66
Add policies to standard query library (#3848)
- Add 3 policies to `standard-query-library.yml` and update standard policy templates in the Fleet UI
2022-01-25 15:00:31 -05:00
Noah Talerman
d7e013643c
Remove policies from standard-query-library.yml (#3636)
- For now, remove policies from `standard-query-library.yml` so that the `fleetctl preview` command does not fail
2022-01-11 11:30:37 -05:00
Noah Talerman
0647e0b641
Add contributors to standard policies (#3635)
- Resolve failing "Deploy Fleet Website" CI task
2022-01-11 11:11:37 -05:00
Tomas Touceda
c662cd2b53
Add policies yaml (#3464)
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
2022-01-11 11:04:29 -03:00
Kelvin Oghenerhoro Omereshone
897fa82ec1
Feature/add query to get apps opened within the last 24 hours (#3513)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days
2022-01-04 22:25:18 +01:00
Sevickson
e776c2ea36
Dedup Get installed Windows software query (#3417)
python_packages query was 2 times in the same query
2021-12-27 18:39:31 -03:00
Tony Gauda
00ccdfdce8
Update standard-query-library.yml to detect Log4J (#3367)
Added query to detect Log4j in response to CVE-2021–44228 on macOS and Linux
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-12-14 14:54:11 -08:00
Omereshone Kelvin
7d77579ead
Update description for query to get apple applications count (#3330) 2021-12-12 18:03:56 -08:00
Omereshone Kelvin
64203a022a
Fix duplicated description on standard query (#3286) 2021-12-12 18:02:52 -08:00
Omereshone Kelvin
8ec3986263
Fix description language on failing batteries query (#3328) 2021-12-11 16:24:41 -08:00
Omereshone Kelvin
c5aaeaab6f
Add description to windows machines with unencrypted hard disks query (#3329) 2021-12-11 16:23:42 -08:00
Omereshone Kelvin
10871172f6
Standard query library: Add description to "Get laptops with failing batteries" (#3254) 2021-12-09 12:23:54 -05:00
Omereshone Kelvin
71883ede82
Update instructions for contributing multiple queries to the standard query library (#3207) 2021-12-06 10:15:05 -05:00
Omereshone Kelvin
5a2ed6f395
Add 3 queries to the standard query library (#3138)
Queries:
- Get applications hogging memory
- Get Mac and Linux machines with unencrypted primary disks
- Get servers with root login in the last 24 hours
2021-12-03 17:13:41 -05:00
Omereshone Kelvin
2302606ca0
Standard query library: add query for running docker containers (#3137)
Query: Get running docker containers
2021-12-01 09:42:56 -05:00
eashaw
59a6dde7d1
fix code block and indentation (#2672) 2021-10-28 10:24:52 -05:00
Noah Talerman
11ecb7c1f7
Fix query syntax for several queries in the standard query library (#2664)
Fix syntax for the following queries:
- Get user files matching a specific hash
- Check for artifacts of the Floxif trojan
- Get malicious Python backdoors
2021-10-25 11:37:28 -04:00
eashaw
675f14b16b
Standard query library updates (#2546)
* update Floxif trojan query description, Add puffyCid's query, update query description styles

* Update standard-query-library.yml
2021-10-23 06:58:34 +09:00
Lucas Manuel Rodriguez
54805b5b72
Perform early session check on fleetctl commands (#2620)
* Perform early session check on fleetctl

* Add fleetctl test for the early session check
2021-10-22 15:41:17 -03:00
Luke Heath
99673eb148
Fix broken links to docs (#2561) 2021-10-22 12:39:20 -05:00
m4wh6k
b856f351b0
Fix broken link on QueriesListWrapper and in docs to std query lib docs (#2614) 2021-10-20 16:53:01 -07:00
Mike McNeil
d3a2083188
add example query that checks a malware artifact (#2296) 2021-09-29 22:08:39 -05:00
Martavis Parker
4f3f6187d6
Top-level seed data doc and re-numbering (#2109)
* created separate doc for seeding data

* re-numbered doc names
2021-09-20 11:48:24 -07:00