Nick Anderson
0a496d4c1d
deps: building portable rocksdb libs ( #3690 )
2017-09-12 20:41:21 -07:00
Nick Anderson
e252645d16
deployment: small fix to osquery utils Start-Process cmdlet ( #3687 )
2017-09-12 13:56:31 -07:00
Omer Katz
1cfe9bb528
Known hosts table performance improvements ( #3679 )
2017-09-10 15:06:28 -07:00
Omer Katz
1dcd3773f2
Load average table performance improvements ( #3607 )
2017-09-10 11:03:18 -07:00
Teddy Reed
49bb0ecc49
process: Aesthetic changes to process and process_ops ( #3678 )
2017-09-10 10:58:38 -07:00
Teddy Reed
19930bfed3
logger: Reconfigure verbosity with logger_min_level ( #3676 )
2017-09-09 19:11:56 -07:00
Teddy Reed
c1ad74cbe7
enroll: Add host_details to TLSEnrollPlugin ( #3675 )
2017-09-09 19:10:46 -07:00
Teddy Reed
360d9fd516
cmake: Do not use target LOCATION property ( #3674 )
2017-09-09 17:36:32 -07:00
Teddy Reed
c2bcc459d3
[ Fix #3466 ] Link shared object builds correctly ( #3673 )
2017-09-09 17:08:46 -07:00
Teddy Reed
8dc4268761
kernel: Disable kernel support by default ( #3672 )
2017-09-09 16:48:39 -07:00
Teddy Reed
e491194238
enroll: Fix bug in CMake that removed enroll tests ( #3671 )
2017-09-09 15:25:52 -07:00
Allan Liu
1cd4ed949f
kafka logger: Kafka producer implemented as a Logger plugin ( #3155 )
2017-09-09 10:38:01 -07:00
Teddy Reed
4d631edac6
rocksdb: Remove manual flush ( #3663 )
2017-09-08 13:04:44 -07:00
Nick Anderson
072e73b54d
shell: ensuring shell does not access stop event ( #3664 )
2017-09-08 13:03:31 -07:00
Teddy Reed
061dfeecb2
tests: Improve permissions tests as root ( #3665 )
2017-09-08 04:08:57 -04:00
Teddy Reed
e83c1dc4b6
packages: Fix debug info break from binary unification ( #3662 )
2017-09-08 02:23:33 -04:00
Teddy Reed
e86470c96b
[ Fix #3625 ] Use readlink and add test for listening_ports ( #3661 )
2017-09-08 02:08:27 -04:00
Seshu Pasam
6fab8b6083
logging: adding "counter" to differentiate initial results ( #3651 )
...
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
Seshu Pasam
863cd72e17
AWS code refactoring. ( #3660 )
2017-09-07 09:26:17 -07:00
lxcode
2f60dd0fd3
FreeBSD: Avoid clash with rapidjson ( #3634 )
2017-09-06 17:33:03 -07:00
Nick Anderson
11acc7d64f
deps: bumping rocksdb to 5.7.1 on Windows ( #3640 )
2017-09-06 17:03:29 -07:00
Nick Anderson
093d1337c1
deps: fixing up aws-sdk-cpp choco build script ( #3648 )
2017-09-05 08:00:08 -07:00
Alessandro Gario
6489c8b050
logging: Add Firehose/Kinesis support to Windows ( #3641 )
2017-09-03 16:52:47 -07:00
Teddy Reed
16b40138fe
rocksdb: Flush all column families and set max files ( #3638 )
2017-09-02 12:08:35 -07:00
Nick Anderson
002f2cb873
deploy: Adding binary version and publisher information ( #3629 )
2017-09-02 11:22:56 -07:00
lxcode
61e9f38f57
Add Jenkins status for FreeBSD ( #3636 )
2017-09-02 11:01:28 -07:00
Teddy Reed
205da3c698
rocksdb: Implement a 'backup' and recover feature for RocksDB ( #3635 )
2017-09-01 22:31:03 -07:00
Atyansh Jaiswal
68b1de153d
tables: Adding posix curl virtual table ( #3596 )
2017-08-30 15:24:05 -07:00
Nick Anderson
2a317ce17f
worker: shutdown safely on Windows only if not worker ( #3628 )
2017-08-30 08:45:56 -07:00
Teddy Reed
ae12cf35d8
bottles: boost cmake asio cpp-netlib rocksdb and libaptpkg ( #3630 )
2017-08-30 01:25:26 -07:00
Teddy Reed
e748f38a06
deps: Finish removal of snappy and lz4 dependencies ( #3618 )
2017-08-27 17:45:15 -07:00
Mitchell Grenier
7750fa8ee5
deps: Remove snappy and lz4 ( #3545 )
2017-08-27 12:02:27 -07:00
Nick Anderson
3c782051eb
tables: adding chocolatey packages virtual table ( #3612 )
2017-08-27 11:21:04 -07:00
Teddy Reed
f29de27649
Combine osqueryi and osqueryd into single binary ( #2742 )
2017-08-27 11:09:25 -07:00
Alessandro Gario
a3e4310188
Fix 3568: Kinesis/Firehose record size check failure ( #3599 )
2017-08-27 11:01:52 -07:00
Teddy Reed
15485e3eb0
deps: Update cmake to version 3.9.1 ( #3616 )
2017-08-27 10:37:30 -07:00
Teddy Reed
e4bbf06074
codemod: Refactor query functions out of database ( #3615 )
2017-08-26 18:36:06 -07:00
Teddy Reed
af3d323841
deps: Fix rapidjson bottle root_url ( #3614 )
2017-08-26 18:22:32 -07:00
Teddy Reed
c50a9b1e82
Fix boost 1.65 build on macOS ( #3613 )
2017-08-26 17:10:25 -07:00
Teddy Reed
70fe4ab194
deps: Update boost for macOS and Linux to version 1.65 ( #3600 )
2017-08-26 16:55:31 -07:00
Nick Anderson
7d82e65cc5
docs: updating comment documentation on carver endpoints ( #3603 )
2017-08-25 12:04:01 -07:00
Nick Anderson
6445e987c1
deps: bumping boost for Windows to 1.65.0 ( #3602 )
2017-08-25 07:43:38 -07:00
Mike Myers
906104564c
Add examples of Windows registry virtual table ( #3597 )
2017-08-22 17:28:56 -07:00
Nick Anderson
f2736bd809
deploy: removing extraneous/wrong verbosity from windows deployment scripts ( #3595 )
2017-08-22 14:36:15 -07:00
Teddy Reed
501bb22de9
deps: Add rapidjson bottle for macOS ( #3591 )
2017-08-22 12:01:40 -07:00
Teddy Reed
a7330e41fc
deps: Update Linux bottles libcryptsetup libdevmapper libdpkg rapidjson ( #3590 )
2017-08-22 11:52:49 -07:00
Teddy Reed
1fadfb11d4
deploy: Change OLD_PIDFILE for systemd to be LOCAL_PIDFILE ( #3589 )
2017-08-22 10:46:25 -07:00
Teddy Reed
48ab0c783c
logger: Use a mutex to protect buffered counts ( #3588 )
2017-08-22 01:30:13 -07:00
Nick Anderson
8bb1e40d27
tables: porting the process_memory_map table to windows ( #3587 )
2017-08-21 21:47:45 -07:00
Teddy Reed
57f6e37839
audit: Handle AUDIT_SOCKADDR messages ( #3586 )
2017-08-21 20:53:32 -07:00