230 Commits

Author	SHA1	Message	Date
Rohit Varkey Thankachan	3cd26ac48c	Add collisions to the interface_details table (#3491)	2017-07-24 13:51:50 -07:00
Teddy Reed	a9799a9426	Allow caching for tables with indexes and additionals (#3472)	2017-07-18 00:08:38 -07:00
Teddy Reed	dacfbd4584	Separate preferences from plist and add user-concept (#3455)	2017-07-02 18:28:59 -07:00
Teddy Reed	99675fdbb2	audit: Increase speed when using socket_events (#3449)	2017-07-02 17:18:40 -07:00
ryanheffernan	cf50143e69	Adding autoexec table for Windows (#3444)	2017-06-27 13:48:21 -07:00
ryanheffernan	80acd105f5	IE Extensions table for Windows - Browser Helper Objects (#3436)	2017-06-27 10:50:36 -07:00
Teddy Reed	617314c7df	tables: Add flags to interface_details (#3439)	2017-06-25 14:12:01 -07:00
Allan Liu	256d113a74	Linux software RAID table (#3304)	2017-06-21 21:58:37 -07:00
Teddy Reed	c81c815f75	tables: Add symlink column to file table (#3390)	2017-06-18 14:42:40 -07:00
Rohit Varkey Thankachan	6b211a19ad	cpu_time on macos (#3392)	2017-06-18 14:28:07 -07:00
Teddy Reed	dae221e331	virtual tables: Allow tables to use an 'extended' schema (#3416)	2017-06-18 14:27:18 -07:00
Teddy Reed	4f7abe963d	Allow up to 64k rpm_package_files (#3402)	2017-06-13 13:22:55 -07:00
Rohit Varkey Thankachan	dfb6d84112	Load Averages on POSIX systems using getloadavg (#3396)	2017-06-10 15:25:20 -07:00
ryanheffernan	80aaed8b05	[Fix #3313] Adding driver version + adding malloc/pointer safety to drivers table (#3319)	2017-06-05 09:06:49 -07:00
Mitchell Grenier	739d910a2c	Fix #1546 Add local host name (#3370)	2017-06-02 16:15:50 -07:00
Rohit Varkey Thankachan	081ea9e76d	Virtual memory statistics for darwin (#3368)	2017-05-31 12:00:44 -07:00
lxcode	8b7b37bf4f	Add table for FreeBSD kernel modules. (#3328)	2017-05-26 15:10:59 -07:00
Teddy Reed	9ba0edb4bb	darwin: Improve disk_events add detection (#3332)	2017-05-26 10:38:26 -07:00
Mitchell Grenier	6065c26f1d	Make all descriptions use periods consistently. (#3324)	2017-05-25 12:43:58 -07:00
ryanheffernan	05b7b80891	Refactor Windows interface_addresses table to use win32 API and report accurate netmasks. (#3297)	2017-05-23 14:58:11 -07:00
Mitchell Grenier	0f76810699	Fix temperature sorting (#3308)	2017-05-23 09:15:34 -07:00
Seshu Pasam	0cb7c3cc3e	Fix spec file names and added missing version in packs (#3289)	2017-05-20 00:42:17 -07:00
lxcode	9b803d78d7	FreeBSD: Fix os_version, add pkgng package table (#3278)	2017-05-12 14:11:01 -07:00
ryanheffernan	c279342226	Allow querying Windows Registry by 'path' column (#3270)	2017-05-11 10:29:59 -07:00
Seshu Pasam	4cfb31452c	Docker support (#3241)	2017-05-05 09:53:12 -07:00
Teddy Reed	4372785d5d	Refactor build logic to allow optional: yara, tsk, lldpd (#3226)	2017-04-28 13:45:41 -07:00
ryanheffernan	0458abc453	Split Startup items 'path' column into 'path' and 'args'	2017-04-27 23:56:08 -04:00
lxcode	03a9798b7e	FreeBSD: add functional routes.cpp, unblacklist modules (#3225)	2017-04-27 16:34:31 -07:00
Robin Breathe	cbc34c44fe	Darwin: Add channel column to wifi_status and wifi_survey tables (#3221)	2017-04-26 14:41:24 -07:00
Gregory Heimbuecher	c5fd96cdf3	Fix #2838: Adds the event_taps table to Darwin (#3188)	2017-04-21 15:55:12 -07:00
Mitchell Grenier	d5f002d447	Adding a table for Time Machine Backup Destinations (#3177)	2017-04-20 19:15:29 -07:00
Nick Anderson	13524f8833	Adding file carving feature to osquery (#3038)	2017-04-20 19:00:26 -07:00
Dan Sedlacek	13aef1fb73	Windows Network Routes (#3040)	2017-04-19 20:03:20 -07:00
Teddy Reed	90078f15ea	events: Add hidden EID to all events tables (#3159)	2017-04-14 08:20:20 -07:00
Nick Anderson	6a90db47be	Adding the Windows Scheduled Tasks virtual table (#3153)	2017-04-13 07:53:49 -07:00
Teddy Reed	b3ee6c9a8d	tables: Fix table metadata when constraints are used (#3151)	2017-04-12 21:48:28 -07:00
ryanheffernan	f32ceb306b	Adding Windows Startup Info Table (#3137)	2017-04-05 15:14:28 -07:00
ryanheffernan	da427ab6c0	[Fix #3138] Adding index on 'key' column of Windows Registry table (#3139)	2017-04-05 13:02:36 -06:00
ryanheffernan	c91b905091	Allowing OR clause in registry virtual table (#3136)	2017-04-04 15:43:06 -07:00
Teddy Reed	7b6e4c7a27	audit: Optimize user_events and add auid (#3120)	2017-03-31 08:30:45 -07:00
Rubab-Syed	92e545e6bf	Python packages (#3089)	2017-03-26 00:03:10 -07:00
mnmnc	a63cf1344e	Minor description correction (#3096)	2017-03-22 15:55:13 -07:00
Teddy Reed	69bb69fd6d	events: Inspect schedule and improve tests (#3087)	2017-03-20 22:03:09 -07:00
ryanheffernan	5671bb720b	Refactoring Windows Registry table to be more like the file table (#3073)	2017-03-17 12:47:11 -07:00
Allan Liu	0cf0c3b428	lldp_neighbors: posix table spec and table implementation (#2957)	2017-02-28 10:02:13 -08:00
Allan Liu	3c3d649b1e	Prometheus Metrics table (#2925)	2017-02-26 21:59:51 -08:00
Nick Anderson	e961fc850e	Adding the Windows event log publisher (#2937)	2017-02-02 17:05:58 -08:00
Mike Arpaia	2ad1d8839f	Introduce two new host identifier options (#2944)	2017-01-27 17:56:50 -08:00
Samuel Keeley	743580f208	Add country_code to wifi_status and wifi_survey tables. (#2940)	2017-01-25 10:20:39 -08:00
Dan Sedlacek	1d604fc1af	[windows] arp_cache virtual table (#2839)	2017-01-10 19:09:46 -08:00