Commit Graph

2971 Commits

Author SHA1 Message Date
himanshudas
10211d938b Merge missing package dependencies for Debian wheezy 2016-03-29 11:49:57 -07:00
Teddy Reed
70043f55a3 Merge pull request #1966 from marpaia/fix-1962
[Fix #1962] Clear cache of distributed query results after flush
2016-03-29 11:41:43 -07:00
Teddy Reed
fd0e520d20 Remove bashisms from CentOS7 systemd service 2016-03-29 10:12:04 -07:00
Teddy Reed
2379493721 Introduce decorator queries 2016-03-29 10:03:50 -07:00
Mike Arpaia
d70affe3d3 [Fix #1962] Clear cache of distributed query results after flush
If the distributed plugin's `writeResults` method can be successfully
called, we must clear the local vector of results so that we're not
constantly growing it over time.
2016-03-29 09:26:27 -07:00
Teddy Reed
c2a364c573 Merge pull request #1982 from zwass/asl_test_fix
Update flaky test for ASL table
2016-03-28 17:51:40 -07:00
Zachary Wasserman
91691f71d6 Update flaky test for ASL table
Previously, this test relied on there being console messages available
to query for. Now, it actually writes a message to ASL, then verifies
that the message can be found. It also exercises a more complicated
query than previously. Also remove potentially high latency queries.

Fixes issue #1975
2016-03-28 14:06:53 -07:00
Teddy Reed
d71fa5b46a Remove forking from systemd service 2016-03-27 15:11:20 -07:00
Teddy Reed
2a350afb10 Merge pull request #1974 from theopolis/sane_logging_disable
[Fix #1973] Improve logging/extensions relays
2016-03-27 01:00:16 -07:00
Teddy Reed
b9194026db [Fix #1973] Improve logging/extensions relays 2016-03-27 00:43:02 -07:00
Teddy Reed
e663d91f00 Merge pull request #1972 from theopolis/fix_1971
[Fix #1971] Use recursive locks for config data predicates
2016-03-26 22:27:45 -07:00
Teddy Reed
1b83ecb30b Merge pull request #1970 from Centurion89/add_adware_osxattacks
Adding detection for new adware variants to osx-attacks
2016-03-26 22:27:24 -07:00
Chris Long
de1c630850 Adding wildcards 2016-03-27 00:10:27 -05:00
Teddy Reed
a18444813b [Fix #1971] Use recursive locks for config data predicates 2016-03-26 21:52:22 -07:00
Teddy Reed
68f3eb5b43 Merge pull request #1967 from zwass/create_table_docfix
Collection of doc fixes
2016-03-26 21:08:59 -07:00
Chris Long
c9e4f8038d Adding detection for new adware variants to osx-attacks 2016-03-26 10:47:44 -05:00
Teddy Reed
7ea46759d1 Merge pull request #1968 from synapsis2112/osquery_systemd]
systemd properly supervised
2016-03-25 18:35:02 -07:00
Matt Moran
f1bdf23d88 systemd properly supervised 2016-03-25 14:12:48 -07:00
Zachary Wasserman
0eff0f2f4e Collection of doc fixes
- Minor fix in creating tables documentation
- Fix docs for join
- Add note about config paths
- Update events docs
- Fix link to query packs
2016-03-25 14:12:41 -07:00
Teddy Reed
9f237479dc Merge pull request #1965 from sroberts/patch-1
Inconsistant Pathing for Flags File
2016-03-25 12:32:16 -07:00
Scott J. Roberts
9653b81833 Inconsistant Pathing
When I added the flag file switch it was aimed at `/var/osquery`, but the package is built such that everything exists in `/private/var/osquery`. This simply makes this more consistent.
2016-03-25 13:55:52 -04:00
Teddy Reed
684697ba8d Merge pull request #1963 from theopolis/yara_move
Add move events to yara_events
2016-03-24 12:16:18 -07:00
Teddy Reed
339f142da4 Add move events to yara_events 2016-03-24 11:24:54 -07:00
Teddy Reed
6f034a7156 Merge pull request #1957 from theopolis/events_dispatcher
Move dispatcher to public API
2016-03-21 15:58:47 -07:00
Teddy Reed
d2d1431061 Move dispatcher to public API 2016-03-21 15:27:51 -07:00
Teddy Reed
52a3285c18 Merge pull request #1953 from theopolis/pgroup
[Fix #1878] Rename processes 'group' to 'pgroup'
2016-03-20 22:14:08 -07:00
Teddy Reed
5ae039ffb0 Merge pull request #1954 from theopolis/fix_#1928
[Fix #1928] Reorder deps installs to build all with clang
2016-03-20 20:11:36 -07:00
Teddy Reed
eb76fc1860 Rename processes 'group' to 'pgroup' 2016-03-20 19:35:49 -07:00
Teddy Reed
27f4754e5e [Fix #1928] Reorder deps installs to build all with clang 2016-03-20 19:15:44 -07:00
Teddy Reed
cddd2e2772 Merge pull request #1955 from theopolis/harden_udev
Protect udev publisher from fast interrupts
2016-03-20 19:15:33 -07:00
Teddy Reed
482eecfab1 Protect udev publisher from fast interrupts 2016-03-20 18:46:34 -07:00
Teddy Reed
59196b6f44 Merge pull request #1952 from theopolis/profile_fix
Fix shell's --profile switch
2016-03-20 16:37:46 -07:00
Teddy Reed
ebb0ab30ce Fix shell's --profile switch 2016-03-20 16:05:13 -07:00
Teddy Reed
89c32de89d Merge pull request #1950 from friedbutter/signature_multiple_results
add feature to select multiple rows to signature table
2016-03-20 13:53:09 -07:00
Teddy Reed
0ab1a156cd Merge pull request #1882 from waywardmonkeys/patch-1
Fix typos in example conf.
2016-03-20 12:02:23 -07:00
Teddy Reed
b2950c29c3 Merge pull request #1949 from theopolis/extensions_exit
Use the default shutdown flow within extensions
2016-03-20 10:55:29 -07:00
Teddy Reed
15a998e54f Use the default shutdown flow within extensions 2016-03-20 01:45:49 -07:00
Teddy Reed
78b2739adc Merge pull request #1948 from theopolis/update_readme
Update Slack link in README
2016-03-19 20:23:10 -07:00
Sereyvathana Ty
0706146c01 add feature to select multiple rows to signature table 2016-03-19 17:42:21 -07:00
Teddy Reed
4609486f74 Merge pull request #1947 from theopolis/osx_publisher_locks
Enhance publisher resource locking on OS X
2016-03-18 19:13:55 -07:00
Teddy Reed
54578df073 Merge pull request #1946 from theopolis/debian_packages_fixup
Fixup Debian package builds
2016-03-18 18:17:33 -07:00
Teddy Reed
f75c3cf704 Update Slack link in README 2016-03-18 17:05:31 -07:00
Teddy Reed
9f5de79af1 Fixup Debian package builds 2016-03-18 16:59:59 -07:00
Teddy Reed
d7c2f88289 Enhance publisher resource locking on OS X 2016-03-18 16:14:15 -07:00
Teddy Reed
4a88311ca2 Merge pull request #1944 from theopolis/tls_config_interrupt
Check for interrupt requests in TLS config refresher
2016-03-18 12:50:27 -07:00
Teddy Reed
3576189281 Check for interrupt requests in TLS config refresher 2016-03-18 12:03:27 -07:00
Teddy Reed
265ca2ff76 Merge pull request #1942 from theopolis/cleanups3
Various cleanups
2016-03-18 11:11:19 -07:00
Teddy Reed
c62a0f41b6 Various cleanups 2016-03-18 10:40:07 -07:00
Teddy Reed
81109efe04 Merge pull request #1937 from umareddy/patch-1
Update extensions.md
2016-03-17 09:50:40 -07:00
Uma Reddy
e421bfa54b Update extensions.md 2016-03-17 12:47:13 -04:00