Mitchell Grenier
159b2add89
Merge pull request #689 from jedi22/letter_wild
...
First iteration to support letter wilds in file paths
2015-02-05 10:42:50 -08:00
Mitchell Grenier
bb855f4551
Adding last wildcarding component
2015-02-05 10:34:42 -08:00
Teddy Reed
ed9bae29b7
Organizing headers/build for SDK
2015-02-03 14:59:32 -08:00
Mike Arpaia
38369bb30f
Update daemon.cpp
2015-02-03 14:27:17 -08:00
Mitchell Grenier
50eaccc40b
Merge pull request #653 from jedi22/osx-xattr
...
OS X Where From
2015-02-03 11:55:35 -08:00
Mitchell Grenier
30e268b22b
Can query for where a file came from using the OS X eXtended attributes
2015-02-03 11:34:29 -08:00
Zachary Wasserman
ac53637bcf
Add getQueryColumns function to core
...
This new getQueryColumns function allows us to determine what columns
will be returned by executing a given query. It is intended to be used
with the distributed query system, to determine a schema for the
results before sending the query.
Tested by unit tests. Also used valgrind and did not find errors that
looked related to this change (though there appear to be many errors
related to glog logging).
2015-02-02 10:11:00 -08:00
Teddy Reed
b0a91e1058
Fixing threading assumptions for FSEvents runloop
2015-02-01 05:12:28 -07:00
Teddy Reed
e37b16ce2f
Clang analyze fixups for Linux
2015-02-01 05:10:57 -07:00
Teddy Reed
5072b40997
Fix missing virtual destructors for event APIs
2015-02-01 04:32:18 -07:00
Teddy Reed
e4b369917b
Unref udev monitor during events tearDown
2015-02-01 03:00:09 -07:00
Teddy Reed
f96b498ae3
Remove EventFactory::deregister... in favor of ::end
2015-02-01 02:20:09 -07:00
Teddy Reed
bd620853aa
Verbose log when table row is missing a column
2015-02-01 02:20:09 -07:00
Teddy Reed
d39f1fae95
Minor registry documentation, using macros for create/add
2015-02-01 02:20:09 -07:00
Teddy Reed
ab1cb942a8
Fix typo in passwd subscriber, merge vtable tests
2015-02-01 02:20:09 -07:00
Teddy Reed
ab08bc76a8
Towards a new registry
2015-02-01 02:20:09 -07:00
Teddy Reed
ba3931cc1f
Faster fstests using tmp structures
2015-02-01 02:11:46 -07:00
Teddy Reed
c4fb5d45ed
Added make analyze (clang-analyze) and fixed output
2015-01-31 03:09:30 -08:00
Teddy Reed
38a757c7f0
Merge pull request #673 from theopolis/fork
...
Adding a watcher/worker model for osqueryd
2015-01-30 19:09:55 -08:00
Javier Marcos
c0398e2cef
Different packages for different ubuntus
2015-01-30 14:55:28 -08:00
Zachary Wasserman
d840fb8896
Merge pull request #685 from zwass/status_enhancements
...
Add useful operator implementations to Status
2015-01-30 10:03:41 -08:00
Zachary Wasserman
5a2296b91b
Add useful operator implementations to Status
2015-01-29 17:33:41 -08:00
Mitchell Grenier
dcfaeda4ca
Merge pull request #674 from jedi22/filesystem_wild
...
Adding recursive directory traversal functionality
2015-01-29 17:28:35 -08:00
Mitchell Grenier
0ab10f9982
Added the ability to search through directories using wildcards
2015-01-29 17:18:39 -08:00
schettino72
f7357dd4b8
add column info to CREATE VIRTUAL TABLE statement.
2015-01-30 01:08:36 +08:00
schettino72
3a8df753e2
Add unit-test for TablePlugin::statement().
2015-01-30 01:08:36 +08:00
Mitchell Grenier
0e7bf914a3
Removed 2 lines of code that didn't look like they were doing anything
2015-01-27 17:27:01 -08:00
Teddy Reed
a95c6f2b8b
Merge pull request #679 from theopolis/force
...
[FIx #676 ] Add --force option to osqueryd
2015-01-27 16:11:12 -08:00
Teddy Reed
a9ede83446
[ FIx #676 ] Add --force option to osqueryd
2015-01-27 16:00:39 -08:00
Mitchell Grenier
299bef0452
Fixing the last strcpy
2015-01-27 14:06:12 -08:00
Teddy Reed
74d38fa354
Merge pull request #675 from facebook/marpaia-patch-1
...
Update init osquery to not overwrite the logging plugin
2015-01-26 16:54:27 -08:00
Mike Arpaia
db24472539
Update init osquery to not overwrite the logging plugin
2015-01-26 10:44:27 -08:00
Teddy Reed
8fd56417fd
Adding a watcher/worker model for osqueryd
2015-01-26 01:22:50 -07:00
Teddy Reed
72fcd44bf1
Fallback to /proc/net/ for open sockets in Linux
2015-01-25 18:44:10 -07:00
Teddy Reed
59b757c5d5
Adding block_devices to OSX
2015-01-23 13:47:20 -08:00
Teddy Reed
b3fa936156
Add kernel_info to OSX
2015-01-23 13:47:20 -08:00
Teddy Reed
22273b403d
Adding kernel_info to Linux
2015-01-23 13:47:20 -08:00
mike@arpaia.co
b4a2ca1afa
moving config and plist to prefixed directory
2015-01-22 11:07:19 -08:00
Teddy Reed
ee44764098
Add libglog to OBJCXX targets
2015-01-21 23:43:50 -07:00
Teddy Reed
22a91e2bb2
All libraries depend on the external project(s)
2015-01-21 21:35:16 -07:00
Teddy Reed
d912009569
Add unit testing to hashing
2015-01-21 16:24:40 -08:00
Teddy Reed
9c1faec090
Isolate glog include and depend on libglog for #652
2015-01-21 13:37:06 -08:00
Mike Arpaia
248f8b90e6
Merge pull request #657 from facebook/marpaia-patch-1
...
static lock in config.cpp
2015-01-21 13:33:35 -08:00
Mike Arpaia
8e677caaef
Update config.cpp
2015-01-21 13:08:17 -08:00
mike@arpaia.co
10d5aabd36
config-check command in osqueryd
...
This addresses #585
2015-01-21 12:59:39 -08:00
Mike Arpaia
778789d74e
Merge pull request #648 from marpaia/hash-docs
...
hash.h documentation
2015-01-20 16:04:32 -08:00
mike@arpaia.co
ba2e465472
migrating smbios to use new hash api
2015-01-20 15:54:00 -08:00
mike@arpaia.co
ecfe29282b
hash.h documentation
...
I added some doxygen docs for hash.h
2015-01-20 15:36:53 -08:00
Teddy Reed
7e58691df0
Merge pull request #637 from theopolis/osx_smbios
...
OSX/Linux SMBIOS tables
2015-01-20 15:28:55 -08:00
Teddy Reed
b7549e09ca
SMBIOS parsing on Linux using mem
2015-01-20 15:10:19 -08:00
