Teddy Reed
|
84ef94ce9d
|
Testing for table query constraints
|
2015-01-12 12:52:29 -08:00 |
|
Teddy Reed
|
465db46628
|
Fix shouldFire pubsub virtual
|
2015-01-11 19:51:54 -08:00 |
|
Teddy Reed
|
9b0adcc47f
|
[Fix #560] Improve config tests
|
2015-01-01 22:05:03 -08:00 |
|
Bryan Eastes
|
93cb303abc
|
Merge branch 'master' of github.com:facebook/osquery into 520_pt_json_workaround
|
2014-12-20 18:24:33 -08:00 |
|
Bryan Eastes
|
5ad8d3ec55
|
Changes from CR
|
2014-12-20 18:19:33 -08:00 |
|
mike@arpaia.co
|
b9f732c31f
|
Updating the license comment to be the correct open source header
As per t5494224, all of the license headers in osquery needed to be updated
to reflect the correct open source header style.
|
2014-12-18 10:52:55 -08:00 |
|
Teddy Reed
|
6a6851c4bc
|
Merge pull request #544 from theopolis/events_2.0
Events 2.0
|
2014-12-17 20:17:02 -08:00 |
|
Teddy Reed
|
fa7a1fe4f1
|
Add more docs to Events 2.0
|
2014-12-17 21:10:51 -07:00 |
|
Teddy Reed
|
d5c5253bbc
|
Add osquery_flags vtable
|
2014-12-16 02:07:50 -08:00 |
|
Teddy Reed
|
6de14466db
|
Events 2.0 using pbr
|
2014-12-15 11:55:05 -08:00 |
|
Teddy Reed
|
17efa0b3d6
|
Migrate subscribers on OSX
|
2014-12-15 00:25:28 -08:00 |
|
Teddy Reed
|
fbd56663d9
|
Migrate fsevents to events 2.0
|
2014-12-14 22:17:38 -08:00 |
|
Teddy Reed
|
d927495209
|
Support casted subscribes
|
2014-12-14 21:20:20 -08:00 |
|
Teddy Reed
|
c1e37b73fb
|
Non-static event type and name IDs
|
2014-12-14 18:03:41 -08:00 |
|
Teddy Reed
|
d2a93cf8c1
|
Remove EventSubscriber macros
|
2014-12-14 17:05:07 -07:00 |
|
Teddy Reed
|
0d00e4b0e9
|
Remove EventPublisher macros
|
2014-12-14 04:43:31 -07:00 |
|
mike@arpaia.co
|
8f8bc6b772
|
osquery_info table
|
2014-12-10 18:38:41 -08:00 |
|
Bryan Eastes
|
bd97cb501a
|
First draft of workaround for #520
|
2014-12-10 00:15:27 -08:00 |
|
Teddy Reed
|
2ebbbf6f98
|
Linux udev events
|
2014-12-08 14:13:47 -08:00 |
|
Teddy Reed
|
a0866c0972
|
Merge pull request #524 from theopolis/events_expiry
Events expiry
|
2014-12-06 19:52:16 -08:00 |
|
Teddy Reed
|
19695d40aa
|
Add expiration to events
|
2014-12-06 18:28:03 -07:00 |
|
Teddy Reed
|
78ecc73d81
|
Add -json output mode for shell
|
2014-12-06 18:22:48 -07:00 |
|
Teddy Reed
|
7b16e45f55
|
Improve pubsub unittests
|
2014-12-05 16:18:05 -07:00 |
|
Teddy Reed
|
b7765a6af0
|
Codemod to improve include search paths for includes
|
2014-12-03 15:31:09 -08:00 |
|
Teddy Reed
|
f4337243ec
|
Towards simple table generation
|
2014-12-02 20:36:46 -08:00 |
|
Teddy Reed
|
366c646cb8
|
Merge pull request #507 from theopolis/config_options
Read arguments/options from config
|
2014-12-01 23:57:53 -08:00 |
|
Teddy Reed
|
8db44f70f3
|
[Fix #500] Add virtual dtors to event pub/subs
|
2014-12-01 02:44:35 -07:00 |
|
Teddy Reed
|
43b4debd47
|
Read arguments/options from config
|
2014-12-01 02:05:46 -07:00 |
|
Teddy Reed
|
e33443d354
|
clang-format on feature-predicate updates
|
2014-11-29 22:36:07 -08:00 |
|
Teddy Reed
|
76780aa6f0
|
Improve OSX apps table
|
2014-11-29 22:36:07 -08:00 |
|
Teddy Reed
|
b1cf8f1e61
|
Improve and use constraints for various OSX tables
|
2014-11-29 22:36:07 -08:00 |
|
Teddy Reed
|
56014b9c31
|
Moving tables definitions into core/tables.cpp
|
2014-11-29 22:36:06 -08:00 |
|
Teddy Reed
|
b18068f114
|
Improve kextstat/startup_items code and perf
|
2014-11-29 22:36:06 -08:00 |
|
Teddy Reed
|
ba86d68e68
|
Rebuild generated files when templates change.
|
2014-11-29 22:36:06 -08:00 |
|
Teddy Reed
|
b4be08a702
|
Updating table generators to use QueryContext
|
2014-11-29 22:36:05 -08:00 |
|
Teddy Reed
|
cd8413d483
|
Organizing affinity types into tables.
|
2014-11-29 22:36:05 -08:00 |
|
mike@arpaia.co
|
e29e808358
|
build tooling
adding build files for some random build systems
|
2014-11-25 17:38:16 -08:00 |
|
Teddy Reed
|
44181b7aeb
|
Add basic support for unsigned long long int
|
2014-11-21 10:32:56 -08:00 |
|
Teddy Reed
|
b2debf509a
|
Cleanup inode table implementations and unblacklist
|
2014-11-19 16:56:48 -08:00 |
|
mike@arpaia.co
|
e7fedd8833
|
throw in ctor if an error occurs
|
2014-11-17 19:47:44 -08:00 |
|
Mike Arpaia
|
49da6387ea
|
Merge pull request #454 from facebook/pidfile
pidfile for osqueryd
|
2014-11-17 19:27:08 -08:00 |
|
mike@arpaia.co
|
c56b663261
|
pidfile for osqueryd
close #442
|
2014-11-17 18:42:36 -08:00 |
|
mike@arpaia.co
|
f8c27bde85
|
Add a splay of 10% to scheduled queries so that they don't stack
close #446
|
2014-11-17 14:19:09 -08:00 |
|
mike@arpaia.co
|
ca2c63419a
|
incorrect namespacing
|
2014-11-17 13:47:44 -08:00 |
|
Teddy Reed
|
565bce3c07
|
Fix unwind exception catching
|
2014-11-14 01:42:00 -08:00 |
|
Teddy Reed
|
153cc7208f
|
More control over logging
|
2014-11-12 18:19:22 -07:00 |
|
Teddy Reed
|
aa933491d2
|
Merge pull request #416 from theopolis/hack_fix_386
[Fix #386] This is a hack to fix Ubuntu unwinding
|
2014-11-12 16:43:18 -08:00 |
|
Teddy Reed
|
b419c79791
|
[Fix #386] This is a hack to fix Ubuntu unwinding
|
2014-11-12 17:12:37 -07:00 |
|
mike@arpaia.co
|
a8832482b3
|
implementation for #360
|
2014-11-12 16:51:14 -05:00 |
|
Teddy Reed
|
0d8b9d3eaa
|
Use SQLite types
|
2014-11-12 11:07:24 -08:00 |
|