Mitchell Grenier
192ccaeaed
New ATC Tables ( #4271 )
2018-05-04 13:54:14 -07:00
Teddy Reed
f5abb45919
Fast code audit for flags and dispatcher ( #4355 )
2018-05-01 22:47:01 -04:00
Teddy Reed
0625657dc6
Remove clang pragmas from tables.h ( #4352 )
2018-05-01 21:50:11 -04:00
Teddy Reed
349f401161
Move singleton accessors into implementations ( #4347 )
2018-05-01 14:56:51 -04:00
Filipe Manco
c12895c5ae
Fix registry locking for plugin method ( #4341 )
2018-05-01 13:27:04 -04:00
Teddy Reed
7919791637
fbthrift: Second set of Apache and FbThrift refactors ( #4312 )
2018-05-01 13:26:10 -04:00
Mitchell Grenier
592f7d9fa8
bug: convert empty ptree json to empty RJ lists for db upgrades ( #4325 )
2018-04-24 13:39:22 -07:00
Nick Anderson
2017068f11
database: updating migration logic from ptree to rapidjson ( #4294 )
2018-04-17 10:55:58 -07:00
Filipe Manco
921da9e339
Make RegistryInterface thread-safe ( #4276 )
2018-04-16 16:00:28 +01:00
Teddy Reed
4f531b9a7c
config: Parser keys should be objects or arrays ( #4281 )
2018-04-13 10:10:53 -04:00
Nick Anderson
9e2515a661
database: convert cached ptree entires to RapidJSON results ( #4207 )
2018-03-21 09:39:50 -07:00
Filipe Manco
1bbdff8c7a
Replace ptree with JSON on serialization code ( #4128 )
2018-03-01 00:36:24 +00:00
Teddy Reed
3decac948e
tables: Remove ptree from table plugins ( #4075 )
2018-01-21 05:11:42 -05:00
Teddy Reed
483fbbb594
query: Force query results into proper order ( #2947 )
2018-01-21 01:20:48 -05:00
Teddy Reed
90a737ead7
Replace most of boost::property_tree with rapidjson ( #3910 )
2018-01-20 20:58:01 -05:00
Teddy Reed
00040c6c1a
feature: URI parsing from folly ( #4035 )
2018-01-06 20:26:36 -08:00
Teddy Reed
ec4cad5604
tables: Fix Bookmark and Alias path extraction ( #4022 )
2017-12-28 14:40:23 -08:00
uptycs-nishant
1acc7b91ef
Reducing memory footprint of osquery by achieving zero-copy ( #3977 )
2017-12-27 19:43:20 -08:00
Teddy Reed
f6d077cbf7
license: Change license to Apache 2.0 and GPLv2 ( #4007 )
2017-12-18 16:04:06 -08:00
Teddy Reed
e71390ca82
config: Allow scheduled queries to set blacklist=false ( #4005 )
2017-12-18 08:42:00 -08:00
Teddy Reed
33ab8b6e5d
config: Inspect blacklisted queries ( #4004 )
2017-12-17 19:25:42 -08:00
Alessandro Gario
e859276739
logging: Adds Windows Event Log support ( #3887 )
2017-12-12 14:15:38 -08:00
Teddy Reed
a7c2669ba3
tidy: Improve clang-tidy (modernize) list of checks and run across codebase ( #3870 )
2017-10-29 22:25:49 -07:00
Alessandro Gario
58fa4a6899
Verbose logging when spawning services ( #3689 )
2017-10-24 19:55:05 -07:00
Teddy Reed
4aa3db30ca
[ Fix #3859 ] Lock every access to SQLiteDBInstance::db ( #3883 )
2017-10-24 11:40:26 -07:00
Teddy Reed
9b3d02ff2f
remote: Various refactors for the http_client ( #3882 )
2017-10-24 10:08:42 -07:00
uptycs-nishant
d8b700ab74
Implementing http_client based on boost.beast and adding proxy support to tls logger ( #3623 )
2017-10-22 22:00:29 -07:00
Teddy Reed
cccd27273a
tables: Add dropTo with string UID and GID params ( #3832 )
2017-10-15 11:40:14 -07:00
Teddy Reed
d106647c7f
tables: Require explicit requests for query results caching ( #3805 )
2017-10-12 20:00:51 -07:00
Teddy Reed
29f5dfb369
logger: Add benchmarks for status logging ( #3741 )
2017-09-27 20:30:00 -07:00
Teddy Reed
32ec05c3c0
flags: Add helper method to get an Int32 flag value ( #3739 )
2017-09-27 20:23:15 -07:00
Nick Anderson
4ac3f42656
[ Fix #3619 ] Better shutdown logic for Windows service controller ( #3698 )
2017-09-18 14:15:09 -07:00
Teddy Reed
450ed67422
watcher: Add more details to the utilization limits docs ( #3677 )
2017-09-12 21:54:49 -07:00
Teddy Reed
49bb0ecc49
process: Aesthetic changes to process and process_ops ( #3678 )
2017-09-10 10:58:38 -07:00
Teddy Reed
c1ad74cbe7
enroll: Add host_details to TLSEnrollPlugin ( #3675 )
2017-09-09 19:10:46 -07:00
Teddy Reed
061dfeecb2
tests: Improve permissions tests as root ( #3665 )
2017-09-08 04:08:57 -04:00
Seshu Pasam
6fab8b6083
logging: adding "counter" to differentiate initial results ( #3651 )
...
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
Teddy Reed
205da3c698
rocksdb: Implement a 'backup' and recover feature for RocksDB ( #3635 )
2017-09-01 22:31:03 -07:00
Nick Anderson
2a317ce17f
worker: shutdown safely on Windows only if not worker ( #3628 )
2017-08-30 08:45:56 -07:00
Teddy Reed
f29de27649
Combine osqueryi and osqueryd into single binary ( #2742 )
2017-08-27 11:09:25 -07:00
Teddy Reed
cf170c4278
cleanup: Move query out of database header ( #3576 )
2017-08-20 02:44:38 -07:00
iBigQ
6600361230
fix c++ doc for rapidjson arguments ( #3559 )
2017-08-14 10:55:45 -07:00
Mitchell Grenier
8a963e8d40
[Distributed] Moving to RapidJSON ( #3265 )
2017-08-07 16:34:44 -07:00
Seshu Pasam
9dc69ee282
Minor static analysis fixes. ( #3529 )
2017-08-04 18:22:10 -07:00
Mitchell Grenier
ba35a92243
Expand Carver APIs and Add Compression ( #3386 )
2017-07-31 11:11:45 -07:00
Seshu Pasam
5b42749d93
Some "make audit" output fixes. ( #3508 )
2017-07-31 11:06:08 -07:00
uptycs-nishant
43046f48da
Inotify: re-implemented remove/add subscription and remove/add monito… ( #3459 )
2017-07-21 20:00:34 -07:00
Nick Anderson
de0c0c0663
Updating windows system_info to return fqdn for hostname ( #3470 )
2017-07-21 11:22:07 -07:00
Teddy Reed
a9799a9426
Allow caching for tables with indexes and additionals ( #3472 )
2017-07-18 00:08:38 -07:00
Teddy Reed
57f04c4c49
General code cleanup for the config ( #3467 )
2017-07-17 11:38:21 -07:00
