Commit Graph

156 Commits

Author SHA1 Message Date
Kelvin Oghenerhoro Omereshone
afa63805c8
fix: update heading to conform to Fleet's style guide (#4153)
* fix: update heading to conform to Fleet's style guide

* fix: update heading link to conform to style guide
2022-02-15 10:16:58 +01:00
Guillaume Ross
2378db08c8
3946-Adding antivirus queries (#4154)
* Adding antivirus queries

Adding 3 antivirus queries in the form of an information query as well as in the form of policy queries

* Update standard-query-library.yml

Adding newline at end of file
2022-02-14 14:35:22 -05:00
Noah Talerman
f14653fcd6
Fix broken link and sentence casing in UI (#4127)
- Fix broken link in the empty state for the "Software" card on Home page
- Update "API Token" to sentence case "API token"
2022-02-14 10:19:33 -05:00
Kelvin Oghenerhoro Omereshone
8070e1e606
fix: update heading (#4152)
* fix: update heading

* Update docs/01-Using-Fleet/README.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-02-14 15:50:19 +01:00
Kelvin Oghenerhoro Omereshone
e1708466b5
[DOCS] the last of the headings normalization (#4157)
* fix: update headings in configuration files docs

* fix: update heading in testing docs

* fix: update heading in seeding data docs

* fix: update headings in committing changes docs

* fix: update heading from External Contributors to External contributors

* fix: update headings in API for contributors docs.

* fix: update heading in API versioning docs.
2022-02-14 15:49:43 +01:00
Noah Talerman
e0716d0c2a
Add vulnerability automations to "Automations" docs (#4130) 2022-02-13 18:12:51 -08:00
Zach Wasserman
e20a9b4508
Add platform filters for MDM/Munki/Chrome queries (#4144)
* Add platform filters for MDM/Munki/Chrome queries

This should help quiet warnings that users/customers have reported when
these queries try to run on platforms without the macadmins extension
tables.

For #4123

* Improve documentation

* add changes file

* revert doc formatting

* Update tests

* Yet another test fix

Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-02-11 14:10:26 -03:00
eashaw
9af92b23aa
Update links to documentation (#4163)
* update links to documentation

* revert .sailsrc change

* fix broken link
2022-02-10 19:26:18 -06:00
Noah Talerman
9c24c7d92c
Add policy templates to standard query library (#3956)
* Add remaining policy templates

* Removeempty resolution field

* Update naming for standard policies

* Add enabled word to SIP policy

* Use full SIP

* Also change in constants

* Update windows disk encryption

* Add changes file

* Tweak windows disk encryption policy

* Address lint errors

* Make requested changes

* Reflect changes in policy tempaltes

* Make sure that standard policies and policy templates are the same

* Edit automatic login disabled description

* Also edit in constants
2022-02-10 12:34:30 -05:00
Tomas Touceda
11887f87f7
Add enable scheduled query stats to fleet config (#4066)
* Add enable scheduled query stats to fleet config as well

* Add documentation

* Revert "Allow disabling scheduled query stats via app config (#4049)"

This reverts commit f98fd4d331.

* Add changes file

* Update ref

* Add missing docs
2022-02-09 08:20:29 -03:00
Zach Wasserman
cb4171aa84
Add quoting around string in query library using colon (#4076) 2022-02-07 18:27:50 -08:00
Kelvin Oghenerhoro Omereshone
772457516d
fix: update Filevault to FileVault (#4072) 2022-02-08 02:31:56 +01:00
Kelvin Oghenerhoro Omereshone
ead1551ac2
fix: add Apple ID and app-specific password (#3981) 2022-02-08 01:21:56 +01:00
Kelvin Oghenerhoro Omereshone
6e7c14faef
fix: add warning to query to find log4j vulnerabilities (#4070)
* fix: add warning to query to find log4j vulnerabilities

* Update docs/01-Using-Fleet/standard-query-library/standard-query-library.yml

Co-authored-by: Zach Wasserman <zach@fleetdm.com>

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-02-08 01:15:27 +01:00
Kelvin Oghenerhoro Omereshone
bc86591b14
doc: add introduction to fleetctl docs (#3974)
* doc: add introduction to fleetctl docs

* Update docs/01-Using-Fleet/02-fleetctl-CLI.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-02-08 07:56:02 +09:00
Tomas Touceda
35eac78aed
Add CountsUpdatedAt for munki/mdm status (#4045)
* Add CountsUpdatedAt for munki/mdm status

* Update doc
2022-02-07 14:53:33 -03:00
Tomas Touceda
f98fd4d331
Allow disabling scheduled query stats via app config (#4049)
* Allow disabling scheduled query stats via app config

* Update tests

* Fix test

* Moar test fixes

* Remove redundant set

* Add documentation

* Fix typo in docs
2022-02-07 13:37:54 -03:00
Tharun Rajendran
2084b7d310
feat(api): add endpoint to get team by id (#4018)
* feat(api): add endpoint to get team by id

* fix review feedbacks

* add integration test in enterprise suite
2022-02-04 14:33:22 -03:00
eashaw
243306de02
Add tags to standard query library and fleetdm.com/queries (#3970)
* handle query tags in build-static-content script, update query readme

* show tags in query library, add ability to filter by tags

* fix lint errors

* update mobile styles

* fix CTA link

* update mobile layout

* remove tag line-height and font size

* Update build-static-content.js

* Style update

* remove margin from selected tag, adjust OS logo placement

* requested changes from code review

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
2022-02-03 15:49:36 -06:00
Martin Angers
6e2ba62744
Trigger webhooks for recently published vulnerabilities (#3941) 2022-02-02 16:34:37 -05:00
Tony Gauda
892b18e6dd
Finishing moving to deployment FAQ 2022-01-28 10:23:57 -05:00
Tony Gauda
f34bab62c8
Moving to deployment FAQ 2022-01-28 10:21:48 -05:00
Tony Gauda
f1f68273bd
Discuss API endpoints that should be public 2022-01-28 10:18:15 -05:00
Tony Gauda
d5e4ac207a
What API endpoints are public? 2022-01-28 10:17:12 -05:00
Tomas Touceda
e956b0ba04
Add filter software by CVE and make osquery-perf also push vulnerable software (#3902)
* Add filter software by CVE and make osquery-perf also push vulnerable software

* Update based on review comments
2022-01-28 10:05:11 -03:00
Mike McNeil
d79f27a7a5
Brand guidelines: “FleetDM” >> “Fleet” or “Fleet Device Management” (#3903)
* Brand guidelines: “FleetDM”  >> “Fleet” or “Fleet Device Management”

* Update FAQ.md
2022-01-27 12:50:18 -06:00
Tomas Touceda
1667fdcf22
Add vulnerabilities webhook config (#3897)
* Add vulnerabilities webhook config

* Fix tests

* Update documentation

* Update docs
2022-01-27 10:48:46 -03:00
Tomas Touceda
ffabf803a3
Aggregate munki and mdm data (#3886)
* Aggregate munki and mdm data

* Update doc

* Use reader to read

* Reader to read

* Address review comments
2022-01-26 17:55:07 -03:00
Martin Angers
9a0f749641
Add hosts_count field to "list software" endpoint (#3873) 2022-01-26 09:47:56 -05:00
Noah Talerman
7dafc5ab66
Add policies to standard query library (#3848)
- Add 3 policies to `standard-query-library.yml` and update standard policy templates in the Fleet UI
2022-01-25 15:00:31 -05:00
Kelvin Oghenerhoro Omereshone
789b1d1c20
[DOCS] add FAQ for what happens to logs if Fleet or log destination are offline (#3860)
* feat: add FAQ for what happens to logs

FAQ for what happens to log if either the Fleet's server or the log destination are offline

* fix: add the default buffered_log_max
2022-01-25 01:34:59 +01:00
Tomas Touceda
f02bef6f2c
Add platform filter to host_summary (#3845)
* Add platform filter to host_summary

* Add documentation

* Actually forward the platform param down the chain

* Update mock

* Update mock
2022-01-24 14:49:21 -03:00
RachelElysia
85487eb5b2
Settings > Organization Settings: Code revamp (#3580) 2022-01-21 12:06:58 -05:00
Zach Wasserman
4a70cd69fa
Shorten "simple" query API period to 25s (#3775)
This helps the period stay under the default request timeouts for most
load balancers.

Some default timeouts:
* AWS ALB - 60s
* Nginx - 60s
* GCP LB - 30s
2022-01-19 17:48:57 -08:00
Kelvin Oghenerhoro Omereshone
1c4c0156e0
doc: add FAQ for orbit running alongside osquery (#3685)
* doc: add FAQ for orbit running alongside osquery

* fix: update FAQ to be more clear.

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* fix: typo on osquery

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-01-20 00:07:11 +01:00
Katheryn Satterlee
a9949d869e
Issue 2873 kafka docs improvement (#3771)
* Updating Upgrade docs

* making changes to database section of upgrade docs

* Corrected anchor tags, ready to merge

* Adding section for Kafka to Osquery-logs

Co-authored-by: Katheryn Satterlee <ksatter@Kathys-MacBook-Pro.local>
2022-01-19 11:59:56 -06:00
Katheryn Satterlee
331a04121a
3205 improve updating docs (#3593)
* Updating Upgrade docs

* making changes to database section of upgrade docs

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Update docs/02-Deploying/06-Upgrading-Fleet.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

* Corrected anchor tags, ready to merge

Co-authored-by: Katheryn Satterlee <ksatter@Kathys-MacBook-Pro.local>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2022-01-19 11:25:46 +09:00
Kelvin Oghenerhoro Omereshone
dd751cccf6
docs: add description for /translate endpoint (#3715) 2022-01-18 13:23:20 -06:00
Lucas Manuel Rodriguez
d4243d0a72
Team observers can browse global policies (#3737)
* Allow team observers to browse global policies

* Add integration core test for team observer

* Fix integration tests
2022-01-18 13:18:40 -03:00
Martin Angers
f19e676e62
Refactor async host processing to avoid redis SCAN keys (for policies) (#3657) 2022-01-18 09:56:43 -05:00
Kelvin Oghenerhoro Omereshone
31459b97e4
fix: add clarity on signing and notarising on macOS (#3714)
Add clarity on signing and notarising macOS osquery installers
2022-01-17 18:30:18 +01:00
Noah Talerman
d7e013643c
Remove policies from standard-query-library.yml (#3636)
- For now, remove policies from `standard-query-library.yml` so that the `fleetctl preview` command does not fail
2022-01-11 11:30:37 -05:00
Noah Talerman
0647e0b641
Add contributors to standard policies (#3635)
- Resolve failing "Deploy Fleet Website" CI task
2022-01-11 11:11:37 -05:00
Noah Talerman
76dba03628
Add product process to handbook and update vuln processing docs (#3629)
- Add outline of the product process to handbook
- Add a "Priority drafting" section to handbook
- Update the vulnerability processing docs
2022-01-11 09:15:49 -05:00
Tomas Touceda
c662cd2b53
Add policies yaml (#3464)
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
2022-01-11 11:04:29 -03:00
Kelvin Oghenerhoro Omereshone
6c851e0e12
[DOCS] add docs for signing osquery installers with fleetctl (#3577)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* chore: add dominuskelvin as maintainer

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add link to signing installers

* fix: typo with link to the getting started page

* feat: docs on how to sign an osquery installer

* feat: make signing installer a subsection of osquery installer

* feat: make description for signing installer shorter and compact

* fix: change package to installers

* fix: reword note section
2022-01-10 17:31:10 +01:00
Mike McNeil
eba183d506
add clarification about 90s timeout in new api endpoint (#3592)
* add clarification about 90s timeout

* further clarify warning based on Tomas's feedback
2022-01-06 22:51:55 -06:00
Mike Thomas
c6f9cb4cf3
Update FAQ.md (#3552)
* Update FAQ.md

Added a question about duplicate IP addresses.

* Update docs/01-Using-Fleet/FAQ.md

Add relevant link to "Fleet's teams feature..."
2022-01-05 13:25:56 +09:00
Kelvin Oghenerhoro Omereshone
897fa82ec1
Feature/add query to get apps opened within the last 24 hours (#3513)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days
2022-01-04 22:25:18 +01:00
Noah Talerman
40ba098913
Add "Automations" documentation page (#3537)
- Add "Automations" documentation page to document the available automations in Fleet
- Update the "Vulnerability processing" documentation
- Update the "REST API" documentation
2021-12-30 17:50:27 -05:00