empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 17:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
9,532 Commits 3 Branches 0 Tags 561 MiB
a3399984e1
Commit Graph

71 Commits

Author SHA1 Message Date
Zach Wasserman
cb4171aa84
Add quoting around string in query library using colon (#4076) 2022-02-07 18:27:50 -08:00
Kelvin Oghenerhoro Omereshone
772457516d
fix: update Filevault to FileVault (#4072) 2022-02-08 02:31:56 +01:00
Kelvin Oghenerhoro Omereshone
6e7c14faef
fix: add warning to query to find log4j vulnerabilities (#4070) 
* fix: add warning to query to find log4j vulnerabilities

* Update docs/01-Using-Fleet/standard-query-library/standard-query-library.yml

Co-authored-by: Zach Wasserman <zach@fleetdm.com>

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
 2022-02-08 01:15:27 +01:00
Noah Talerman
7dafc5ab66
Add policies to standard query library (#3848) 
- Add 3 policies to `standard-query-library.yml` and update standard policy templates in the Fleet UI
 2022-01-25 15:00:31 -05:00
Noah Talerman
d7e013643c
Remove policies from standard-query-library.yml (#3636) 
- For now, remove policies from `standard-query-library.yml` so that the `fleetctl preview` command does not fail
 2022-01-11 11:30:37 -05:00
Noah Talerman
0647e0b641
Add contributors to standard policies (#3635) 
- Resolve failing "Deploy Fleet Website" CI task
 2022-01-11 11:11:37 -05:00
Tomas Touceda
c662cd2b53
Add policies yaml (#3464) 
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
 2022-01-11 11:04:29 -03:00
Kelvin Oghenerhoro Omereshone
897fa82ec1
Feature/add query to get apps opened within the last 24 hours (#3513) 
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days
 2022-01-04 22:25:18 +01:00
Sevickson
e776c2ea36
Dedup Get installed Windows software query (#3417) 
python_packages query was 2 times in the same query
 2021-12-27 18:39:31 -03:00
Tony Gauda
00ccdfdce8
Update standard-query-library.yml to detect Log4J (#3367) 
Added query to detect Log4j in response to CVE-2021–44228 on macOS and Linux
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
 2021-12-14 14:54:11 -08:00
Omereshone Kelvin
7d77579ead
Update description for query to get apple applications count (#3330) 2021-12-12 18:03:56 -08:00
Omereshone Kelvin
64203a022a
Fix duplicated description on standard query (#3286) 2021-12-12 18:02:52 -08:00
Omereshone Kelvin
8ec3986263
Fix description language on failing batteries query (#3328) 2021-12-11 16:24:41 -08:00
Omereshone Kelvin
c5aaeaab6f
Add description to windows machines with unencrypted hard disks query (#3329) 2021-12-11 16:23:42 -08:00
Omereshone Kelvin
10871172f6
Standard query library: Add description to "Get laptops with failing batteries" (#3254) 2021-12-09 12:23:54 -05:00
Omereshone Kelvin
5a2ed6f395
Add 3 queries to the standard query library (#3138) 
Queries:
- Get applications hogging memory
- Get Mac and Linux machines with unencrypted primary disks
- Get servers with root login in the last 24 hours
 2021-12-03 17:13:41 -05:00
Omereshone Kelvin
2302606ca0
Standard query library: add query for running docker containers (#3137) 
Query: Get running docker containers
 2021-12-01 09:42:56 -05:00
Noah Talerman
11ecb7c1f7
Fix query syntax for several queries in the standard query library (#2664) 
Fix syntax for the following queries:
- Get user files matching a specific hash
- Check for artifacts of the Floxif trojan
- Get malicious Python backdoors
 2021-10-25 11:37:28 -04:00
eashaw
675f14b16b
Standard query library updates (#2546) 
* update Floxif trojan query description, Add puffyCid's query, update query description styles

* Update standard-query-library.yml
 2021-10-23 06:58:34 +09:00
Mike McNeil
d3a2083188
add example query that checks a malware artifact (#2296) 2021-09-29 22:08:39 -05:00
Martavis Parker
4f3f6187d6
Top-level seed data doc and re-numbering (#2109) 
* created separate doc for seeding data

* re-numbered doc names
 2021-09-20 11:48:24 -07:00