2268 Commits

Author	SHA1	Message	Date
Teddy Reed	7b2f905f43	aws: Fix TSAN warning in request exception (#3556)	2017-08-21 01:04:58 -07:00
Teddy Reed	cf170c4278	cleanup: Move query out of database header (#3576)	2017-08-20 02:44:38 -07:00
uptycs-nishant	5a92d2c7f0	Implementing exclude paths for FIM (#3530)	2017-08-19 19:59:23 -07:00
Nick Anderson	5172580ac8	bug: Processes name correctly displays uid for domain users (#3574)	2017-08-18 21:51:39 -07:00
Mark Ignacio	04b51fd450	add LVM and parental contexts to block_devices and disk_encryption on Linux (#3551)	2017-08-15 10:33:54 -07:00
Teddy Reed	c141dd390f	sanitizers: Skip several tests that fail custom alloc checks (#3555)	2017-08-13 02:01:05 -07:00
Allan Liu	3a70fd7336	md tables: additional bounds checking around substr calls (#3532)	2017-08-10 18:14:39 -07:00
Mitchell Grenier	c680e7d1c7	Fix an sqlite3 memory leak in quicklook_cache (#3552)	2017-08-10 12:02:59 -07:00
lxcode	d391c3e585	Fix memory leak (#3553)	2017-08-10 11:45:00 -07:00
Nick Anderson	b42b3d677e	tables: adding scheduled action to windows scheduled tasks table (#3543)	2017-08-09 09:54:39 -07:00
Thomas Maurice	a41ff4117f	linux usb_devices: add the class, subclass and protocol information (#3542)	2017-08-08 12:17:29 -07:00
Teddy Reed	242ca5f484	implement LIKEs for extended attributes table (#3541)	2017-08-08 08:00:55 -07:00
Vishwa Shah	c54c6e6c0e	corrected size in block_devices on darwin, linux (#3539)	2017-08-07 19:21:18 -07:00
Hugh Neale	2b48fbc557	A fix for Mac OSX process start_time (#3534)	2017-08-07 17:49:12 -07:00
Mitchell Grenier	8a963e8d40	[Distributed] Moving to RapidJSON (#3265)	2017-08-07 16:34:44 -07:00
Mitchell Grenier	b22a403bf1	OpenBSM Events (#3503)	2017-08-07 16:02:16 -07:00
Nick Anderson	b4316a57a0	tables: Adding certificates virtual table for windows (#3498)	2017-08-07 09:08:53 -07:00
Nick Anderson	405ec99476	Adding threads and start_time fields to processes table (#3536)	2017-08-06 20:58:18 -07:00
Seshu Pasam	9dc69ee282	Minor static analysis fixes. (#3529)	2017-08-04 18:22:10 -07:00
Zachary Wasserman	af444370f4	Fix memory leaks in Gatekeeper table (#3531)	2017-08-04 18:19:50 -07:00
Mitchell Grenier	e577a76b9b	macOS - Listeners on folders that throw mount events (#3506)	2017-08-03 18:09:04 -07:00
Nick Anderson	c34d9f8348	windows: Updating various chocolatey powershell build scripts (#3427)	2017-08-03 18:01:10 -07:00
Seshu Pasam	32ad42aea0	EC2 instance metadata implementation. (#3502)	2017-08-03 17:54:17 -07:00
Nick Anderson	ea5f06bfc5	[Fix #3527] Addressing interface indexing in arp_cache table (#3528)	2017-08-03 17:49:58 -07:00
Teddy Reed	7ca18f5a32	audit: Add cwd to process_events on Linux (#3525)	2017-08-03 08:21:15 -07:00
Teddy Reed	d581be4ef0	Fix #3522: Do not call SQL ctor directly (#3524)	2017-08-02 20:20:19 -07:00
Seshu Pasam	6495f14828	EC2 instance tags implementation. (#3507)	2017-08-02 13:40:59 -07:00
Teddy Reed	0b0c5febd1	tables: Add device_firmware to darwin (#3499)	2017-08-02 09:48:09 -07:00
Jason Meller	8ba9a54daa	tables: Implement sharing_preferences table for Darwin (#3509)	2017-08-02 09:30:35 -07:00
Jason Meller	c4010bd306	tables: Implement shared folders table for Darwin (#3510)	2017-08-01 20:33:57 -07:00
Seshu Pasam	9b3be1c02d	Fixes from static code analysis (#3512)	2017-08-01 20:13:25 -07:00
Teddy Reed	90c6a44599	freebsd: Some refactoring to processes table (#3442)	2017-08-01 16:58:26 -07:00
Teddy Reed	30aae77259	extensions: Call wait on all extensions before respawning (#3516)	2017-08-01 15:16:22 -07:00
Mitchell Grenier	ba35a92243	Expand Carver APIs and Add Compression (#3386)	2017-07-31 11:11:45 -07:00
Seshu Pasam	5b42749d93	Some "make audit" output fixes. (#3508)	2017-07-31 11:06:08 -07:00
Jason Meller	b9fbf583d0	Darwin: Add gatekeeper tables (#3461)	2017-07-27 10:51:31 -07:00
Rohit Varkey Thankachan	3cd26ac48c	Add collisions to the interface_details table (#3491)	2017-07-24 13:51:50 -07:00
Nick Anderson	30e5b89df8	Adding in additional program installation locations (#3484)	2017-07-24 09:22:20 -07:00
Teddy Reed	295acfcf3d	worker: Do not ignore SIGCHLD to exit faster (#3487)	2017-07-24 08:48:06 -07:00
Teddy Reed	30a9f23cb0	tsan: Fix watcher and posix utils tsan findings (#3489)	2017-07-24 07:19:31 -07:00
Teddy Reed	98d91192b4	audit: Isolate the audit consumer logic into a thread (#3486)	2017-07-24 00:27:19 -07:00
Teddy Reed	9b7ce1b5ad	logger: Fail all plugins if any fail (#3488)	2017-07-24 00:26:19 -07:00
Zachary Wasserman	b86869208d	Fix error handling in AWS logger plugins (#3426)	2017-07-22 19:41:39 -07:00
uptycs-nishant	43046f48da	Inotify: re-implemented remove/add subscription and remove/add monito… (#3459)	2017-07-21 20:00:34 -07:00
Nick Anderson	de0c0c0663	Updating windows system_info to return fqdn for hostname (#3470)	2017-07-21 11:22:07 -07:00
Nick Anderson	dfbcd50737	windows: Adding osqueryi and osqueryd integration tests (#3479)	2017-07-21 11:20:56 -07:00
Nick Anderson	891a6fb17a	windows: Fixing watcher respawn logic for killed worker processes (#3475)	2017-07-21 11:10:06 -07:00
Mitchell Grenier	7801ac6dce	Add mount to fsevents (#3480)	2017-07-20 09:44:38 -07:00
Mitchell Grenier	0c7059ed0a	APFS Globbing Order Change (#3473)	2017-07-19 13:14:50 -07:00
Mitchell Grenier	951b009069	Fix a crash in interface_details on windows (#3478)	2017-07-18 18:38:01 -07:00