Mitchell Grenier
3f7dda4475
Fix RapidJSON error asserting in configuration ( #4086 )
2018-02-11 01:16:38 -08:00
Teddy Reed
483fbbb594
query: Force query results into proper order ( #2947 )
2018-01-21 01:20:48 -05:00
Teddy Reed
90a737ead7
Replace most of boost::property_tree with rapidjson ( #3910 )
2018-01-20 20:58:01 -05:00
Teddy Reed
f6d077cbf7
license: Change license to Apache 2.0 and GPLv2 ( #4007 )
2017-12-18 16:04:06 -08:00
Teddy Reed
e71390ca82
config: Allow scheduled queries to set blacklist=false ( #4005 )
2017-12-18 08:42:00 -08:00
Teddy Reed
33ab8b6e5d
config: Inspect blacklisted queries ( #4004 )
2017-12-17 19:25:42 -08:00
Teddy Reed
70a214b8a6
logger: Remove invalid assumptions about status logging ( #4001 )
2017-12-17 09:44:15 -08:00
Teddy Reed
13dfd0148c
audit: Force include and source files to be 100644 ( #3971 )
2017-11-30 02:01:04 -08:00
Alessandro Gario
58fa4a6899
Verbose logging when spawning services ( #3689 )
2017-10-24 19:55:05 -07:00
Teddy Reed
19930bfed3
logger: Reconfigure verbosity with logger_min_level ( #3676 )
2017-09-09 19:11:56 -07:00
Allan Liu
1cd4ed949f
kafka logger: Kafka producer implemented as a Logger plugin ( #3155 )
2017-09-09 10:38:01 -07:00
Seshu Pasam
6fab8b6083
logging: adding "counter" to differentiate initial results ( #3651 )
...
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
Teddy Reed
cf170c4278
cleanup: Move query out of database header ( #3576 )
2017-08-20 02:44:38 -07:00
uptycs-nishant
5a92d2c7f0
Implementing exclude paths for FIM ( #3530 )
2017-08-19 19:59:23 -07:00
Teddy Reed
d6184f62b5
Set config refresh to 1 hour and fix retry ( #3469 )
2017-07-17 22:28:11 -07:00
Teddy Reed
57f04c4c49
General code cleanup for the config ( #3467 )
2017-07-17 11:38:21 -07:00
Lambda Conjecture
ecb9e2ccf2
Add Epoch marker to scheduled query results ( #3378 )
2017-07-07 17:56:03 -07:00
Teddy Reed
28c10a415f
freebsd: Update Vagrantfile, config tests, and remove hidden visibility ( #3419 )
2017-06-18 18:30:57 -07:00
Teddy Reed
f8f5718297
watcher: Do not initialize the config in watcher ( #3403 )
2017-06-13 17:26:34 -07:00
Teddy Reed
8ad086098c
watcher: Add initial watchdog delay ( #3360 )
2017-06-08 18:03:30 +01:00
Teddy Reed
eb4536dceb
config: Only reconfigure if content changes ( #3356 )
2017-05-30 19:22:41 -07:00
Teddy Reed
31eb83a1f4
packs: Allow posix in pack platform selection ( #3364 )
2017-05-29 23:13:59 -07:00
Teddy Reed
49ed383017
config: Unify the config refresh logic ( #3351 )
2017-05-29 14:09:44 -07:00
Teddy Reed
8a93acfa1c
TSAN: Address failures and findings in LLVM 4.0 ( #3343 )
2017-05-29 02:06:57 -07:00
Teddy Reed
b38a62be8b
config: Rename getInstance to get for consistency ( #3350 )
2017-05-28 23:04:53 -07:00
Mitchell Grenier
62beb1e547
Fix #3220 Error loading packs not verbose enough ( #3333 )
2017-05-26 14:07:50 -07:00
Teddy Reed
775a4cdcce
flags: Allow custom flags in configuration ( #3301 )
2017-05-25 21:29:31 -07:00
Mitchell Grenier
fe1418f240
Adding a config block to create views ( #3306 )
2017-05-24 21:03:15 -07:00
Teddy Reed
fb287745c6
linux: Use lld and ThinLTO on Linux ( #3284 )
2017-05-14 14:23:50 -07:00
Teddy Reed
bc13431394
freebsd: Fix tests and additional_tests (process, config) ( #3239 )
2017-04-29 19:53:53 -07:00
Teddy Reed
c36a6253b5
packs: Run centos and ubuntu platforms on all Linux ( #3088 )
2017-03-21 01:11:57 -07:00
Teddy Reed
69bb69fd6d
events: Inspect schedule and improve tests ( #3087 )
2017-03-20 22:03:09 -07:00
Allan Liu
3c3d649b1e
Prometheus Metrics table ( #2925 )
2017-02-26 21:59:51 -08:00
Santosh Ananthakrishnan
d3adaedbb1
Allow reloading filesystem config with --config_refresh ( #2967 )
2017-02-26 17:45:06 -08:00
Mitchell Grenier
9c3ef43806
Adding success awareness to TLS config plugin ( #2877 )
2017-01-30 14:08:37 -08:00
Teddy Reed
2713926990
Fix deadlock in decorator execution ( #2916 )
2017-01-17 17:13:09 -08:00
Teddy Reed
5097dfe775
config: Add schedule lock during source update ( #2902 )
2017-01-11 00:05:01 -08:00
Teddy Reed
0178419085
Add a TLS config plugin test that runs the scheduler ( #2898 )
2017-01-10 19:52:58 -08:00
Teddy Reed
0e9733f94c
Simplify Registry and plugin concepts ( #2887 )
2017-01-07 12:21:35 -08:00
Jonathan Lee
383e07e5be
[ Fix #2734 ] Remove OpenSSL link dependency for osquery core ( #2750 )
2016-12-22 00:37:59 -08:00
lambda-conjecture
6e1af3954e
Add --enroll_always flag for TLS config plugin ( #2827 )
2016-12-06 21:56:56 -08:00
Teddy Reed
deed140080
[ #1773 ] Introduce multi-pack configuration syntax ( #2787 )
2016-11-22 09:35:03 -08:00
Teddy Reed
d402a6ad45
Allow configuration JSON to include escaped newlines ( #2785 )
2016-11-19 15:01:40 -08:00
Teddy Reed
59f0bad67c
Additional compiler checks, including shadow ( #2486 )
2016-11-06 01:17:04 -08:00
Teddy Reed
a3acf2a3e5
Fix Config TLS plugin default verb ( #2708 )
2016-11-02 17:08:44 -07:00
Teddy Reed
b814fd54dc
[ Fix #2674 ] Add SQLite prepare lock to shell_exec ( #2677 )
2016-10-24 08:25:38 -07:00
Teddy Reed
215933622f
[ Fix #2658 ] Increase max interval to 1 week ( #2659 )
2016-10-20 19:35:22 -07:00
Teddy Reed
257535e5a2
Correct config-loaded meaning to be has-run-load ( #2528 )
2016-09-26 22:34:03 -07:00
Teddy Reed
4d1451c9b4
Add extensions SDK incompatibility checking ( #2527 )
2016-09-26 17:32:41 -07:00
lambda-conjecture
49d939b93d
Fix update of event plugins when config fails to load at startup ( #2507 )
2016-09-23 19:30:33 -07:00
