Commit Graph

232 Commits

Author SHA1 Message Date
Kolokotronis Panagiotis
4270f75b94 Kafka logging plugin is called kafka_producer (#4594) 2018-06-23 12:01:27 +01:00
Chris Long
5ee495504f docs: Updating process auditing documentation (#4477) 2018-06-19 01:51:55 -04:00
Max Kareta
408c54565e
Removing macOS kernel module (#4572) 2018-06-17 19:21:07 +01:00
Alexander
18f46707fe
actualize names for *base64* family functions (#4568)
Issue: #4563
2018-06-15 11:37:01 +01:00
Daniel Roethlisberger
d326597756 MAC framework is not a supported KPI (#4484) 2018-06-04 11:04:49 -07:00
Nick Anderson
c7e571e5c3
docs: adding note about extensions using RJ (#4480) 2018-06-02 22:37:03 -07:00
Alessandro Gario
5006a02c27 Bundle C++ extensions into a single executable (#4335) 2018-06-03 02:04:36 +01:00
Brian Beyer
c4410d6d74 Fix typo in example (#4472) 2018-06-01 18:37:34 -07:00
Jeff Pace
2eadac3cc1 Updated documentation links back to the osquery website. (#4451) 2018-06-01 00:08:33 -07:00
Scott Lundgren
89fe2dc693 update building documentation to reference Windows (#4389) 2018-05-16 23:36:11 -04:00
Mohamed Bassem
fa96157301 Fixing OSQUERY_DEPS in building documentation (#4390) 2018-05-15 11:48:36 +01:00
Teddy Reed
6e9f55d15d
llvm 6.0 and libFuzzer implementation (#4370) 2018-05-12 21:56:00 -04:00
cankansin
122b3867bd wrong variable name, content should be config (#4385) 2018-05-12 10:23:41 -07:00
Eitan Adler
cbb22c887f Remove extraneous letter from CLI flags (#4334) 2018-04-27 14:14:57 -07:00
Seshu Pasam
e45ddd98ce kafka: Support for kafka compression.codec (#4181) 2018-03-21 11:53:13 -07:00
Mitchell Grenier
26bd32687a
Add block on short-circuiting discovery queries (#4170) 2018-03-05 13:00:54 -08:00
Teddy Reed
2c682ee0ce
docs: Fix new table example and add leaks check (#4141) 2018-02-21 17:58:36 -08:00
Chris Long
e421c398a5 docs: Updating build docs to include make packages (#4068) 2018-02-11 01:58:35 -08:00
uptycs-nishant
c475fe880b TLS session reuse support (#3948) 2018-02-11 01:48:24 -08:00
Teddy Reed
adad4ee8de
build: Set default macOS SDK to 10.11 (#4053) 2018-01-12 17:28:43 -05:00
Teddy Reed
5777efffb4
deps: Add SKIP_DEPS control to CMake (#4036) 2018-01-07 14:32:24 -08:00
Ben Schmoker
966854028f docs: typo in mac setup instructions (#4010) 2017-12-28 21:13:19 -08:00
Thomas Broadley
f5c6113fc4 docs: fix typos (#4015) 2017-12-22 10:08:41 -08:00
UntilDoomsday
9c4c52962d docs: added note about fim file replacement (#4008) 2017-12-19 20:40:49 -08:00
Teddy Reed
222f40f2d3
hash: Use the hash-cache by default and document flags (#4006) 2017-12-18 12:20:57 -08:00
Teddy Reed
e71390ca82
config: Allow scheduled queries to set blacklist=false (#4005) 2017-12-18 08:42:00 -08:00
Teddy Reed
a6998b7518
extensions: watchdog: Opt-in to monitor extension performance (#4003) 2017-12-17 16:33:20 -08:00
Teddy Reed
70a214b8a6
logger: Remove invalid assumptions about status logging (#4001) 2017-12-17 09:44:15 -08:00
Teddy Reed
a073bdc838
docs: Add short debugging note for events in osqueryi (#3993) 2017-12-12 21:27:09 -08:00
Alessandro Gario
e859276739 logging: Adds Windows Event Log support (#3887) 2017-12-12 14:15:38 -08:00
Brad Moylan
9f62c04f15 docs: Document --host_identifier=specified CLI option (#3974) 2017-12-04 11:03:56 -08:00
uptycs-nishant
473920d601 Removing cpp-netlib name references (#3978) 2017-11-30 11:08:48 -08:00
Seshu Pasam
1c141995a3 Kafka SSL support (#3921) 2017-11-30 09:13:46 -08:00
Teddy Reed
16d92d1dc6
docs: Remove quotes from flags documentation (#3937) 2017-11-18 15:22:33 -08:00
Nick Anderson
f7fe7861e2
docs: Adding details on installing osquery on Windows as a service (#3705) 2017-11-15 13:20:22 -08:00
Magicansk
8bf2d9e592 docs: Update process-auditing yara and debugging 2017-11-03 21:36:02 -07:00
Javier Marcos
f256c3a75c Pointing tables/schema documentation to new locations (#3878) 2017-10-24 11:40:09 -07:00
uptycs-nishant
d8b700ab74 Implementing http_client based on boost.beast and adding proxy support to tls logger (#3623) 2017-10-22 22:00:29 -07:00
Brandon Kurtz
1eb70e563a removal instructions for osquery on macOS (#3872) 2017-10-22 15:16:41 -07:00
Seshu Pasam
40eaddb088 build: Add OSQUERY_NOSUDO to build without sudo (#3789) 2017-10-16 23:19:33 -07:00
Teddy Reed
418973f333 Add logger_snapshot_event_type flag for snapshot events (#3838) 2017-10-16 21:16:52 -07:00
Teddy Reed
450ed67422 watcher: Add more details to the utilization limits docs (#3677) 2017-09-12 21:54:49 -07:00
Teddy Reed
c1ad74cbe7 enroll: Add host_details to TLSEnrollPlugin (#3675) 2017-09-09 19:10:46 -07:00
Teddy Reed
8dc4268761 kernel: Disable kernel support by default (#3672) 2017-09-09 16:48:39 -07:00
Allan Liu
1cd4ed949f kafka logger: Kafka producer implemented as a Logger plugin (#3155) 2017-09-09 10:38:01 -07:00
Seshu Pasam
6fab8b6083 logging: adding "counter" to differentiate initial results (#3651)
When setting up alerts for differential logs data you might want to skip the
initial added records. counter can be used to identify if the added records
are all records from initial query of if they are new records. For initial
query results that includes all records counter will be "0". For subsequent
query executions counter will be incremented by 1. When epoch changes, counter
will be reset back to "0".
2017-09-07 15:01:15 -07:00
Teddy Reed
205da3c698 rocksdb: Implement a 'backup' and recover feature for RocksDB (#3635) 2017-09-01 22:31:03 -07:00
uptycs-nishant
5a92d2c7f0 Implementing exclude paths for FIM (#3530) 2017-08-19 19:59:23 -07:00
Mitchell Grenier
b22a403bf1 OpenBSM Events (#3503) 2017-08-07 16:02:16 -07:00
Seshu Pasam
32ad42aea0 EC2 instance metadata implementation. (#3502) 2017-08-03 17:54:17 -07:00