Mitchell Grenier
600a5d017a
Add an sql function for carving paths ( #3317 )
2017-05-26 11:19:43 -07:00
Mitchell Grenier
21395f7cb5
Add base64 encode and decoding functions ( #3312 )
2017-05-24 09:38:10 -07:00
Teddy Reed
e8c39c5572
hashing: Add sha1, sha256, md5 functions ( #3267 )
2017-05-09 23:55:49 -07:00
Teddy Reed
3a5aca9c94
Add getQueryTables to inspect tables scanned ( #3056 )
2017-03-15 18:48:01 -07:00
Teddy Reed
5604a7a99b
freebsd: Rollup of build and source fixes ( #3022 )
2017-02-26 18:25:49 -08:00
Teddy Reed
0de5d3c381
external: Enable external applications through make external ( #3023 )
2017-02-26 17:38:01 -08:00
Teddy Reed
d1d21cda78
darwin: Use boost shared_mutex for OS X ( #3003 )
2017-02-15 14:17:40 -08:00
Teddy Reed
691aefe1f8
sql: Reorder SQLite manager mutex locking ( #2965 )
2017-02-03 22:58:09 -08:00
Teddy Reed
58ed5cc628
Introduce scheduler reload feature ( #2917 )
2017-01-25 17:48:33 -08:00
Teddy Reed
f9599d60d0
Move Mutex to shared_timed_mutex and add ReadLock ( #2915 )
2017-01-15 02:16:40 -08:00
Teddy Reed
0e9733f94c
Simplify Registry and plugin concepts ( #2887 )
2017-01-07 12:21:35 -08:00
Teddy Reed
cefaf0cc59
[ #2809 ] Emit verbose warning on column collisions ( #2810 )
2016-11-30 14:06:19 -08:00
yying
84e6a3401a
Reducing compiler warnings and fails on warn in VS ( #2433 )
2016-09-02 15:04:03 -07:00
Teddy Reed
65dd56e113
Introduce table 'attributes' ( #2431 )
2016-08-31 15:32:20 -07:00
Teddy Reed
05882d717c
Add basic string split and inet_aton functions ( #2124 )
...
The three new SQLite functions:
- split: Splits a column using a set of tokens and a selected index.
- regex_split: Similar to split but with a regex instead of tokens.
- inet_aton: Returns the IPv4 decimal value for a string-formatted address.
2016-05-29 02:06:02 -07:00
Teddy Reed
37544138b5
Add basic math extension functions ( #2123 )
2016-05-28 17:46:24 -07:00
Teddy Reed
b28c4d8d0f
Introduce table options ( #2101 )
...
Table options includes a change to the Registry::call API for TablePlugins.
When requesting route information or the 'columns' action, a new 'op' key is included.
2016-05-18 12:23:52 -07:00
Teddy Reed
947799d28e
Introduce within-query caching ( #2077 )
...
This adds a new optimization feature that allows expensive tables to cache
their results between JOINs. Consider JOINing a list of open sockets, for each
process, then requesting to hash each process path. This query may hash
the same path multiple times.
Within-query caching allows the hash table to respond with the previous
result of the hash request as long as the requested computation was the result
of a single query. Subsequent queries will perform subsequent hashing.
2016-05-09 10:32:33 -07:00
Teddy Reed
ebb0ab30ce
Fix shell's --profile switch
2016-03-20 16:05:13 -07:00
Teddy Reed
afd17f8134
1. Reorganize RocksDB database handle into a plugin
...
2. Introduce a SQLite-based database plugin
3. Refactor database usage to include local 'fast-calls'
4. Introduce an 'ephemeral' database plugin for testing (like a mock)
2016-03-06 20:40:16 -08:00
Teddy Reed
b21c2ed943
[ #1816 ] Refactor DB instance management
2016-02-25 19:07:52 -08:00
Baraa Hamodi
21c2237eca
[osquery] Update copyright headers to new format.
2016-02-11 11:48:58 -08:00
Teddy Reed
cf22d4c60e
Fix -A/.all contention via do_meta_command
2016-02-06 19:20:25 -08:00
Teddy Reed
7f37304c77
Refactor dispatcher shutdown logic
2016-02-05 01:29:42 -08:00
Teddy Reed
4129c6b191
Add 'AggStep0' to OpCode type discovery
...
Closes : #1699
2015-12-09 01:53:40 -08:00
Teddy Reed
98f212e7a9
Add a SQLite query planner for type detection
2015-11-15 13:56:16 -08:00
Teddy Reed
e1d7511600
Remove column type string representations
2015-11-14 15:57:30 -08:00
Teddy Reed
6a07135648
Passing clang Address/Leak Sanitize version 3.7
2015-11-01 04:00:21 -08:00
Michael O'Farrell
ba28b47239
Merge pull request #1298 from theopolis/event_streams
...
Event index time and streaming
2015-07-07 18:27:35 -07:00
Teddy Reed
bf65e3d2d6
Event index time and streaming
2015-07-07 00:44:57 -07:00
Teddy Reed
a8813ab7d8
Some tweaks to estimated scratch/heap for SQLite and RocksDB
2015-07-02 13:52:39 -07:00
Teddy Reed
8b3686a58a
TLS plugin workflow tests
2015-05-26 19:55:00 -07:00
Teddy Reed
700384dedc
Minify tables namespace, extra CMake macros
2015-05-22 10:29:04 -07:00
Sharvil Shah
2735e731de
Implement --disable_tables runtime flag
2015-04-30 01:41:01 -07:00
Teddy Reed
2dce881936
Fix error in run when tables emit blank columns
2015-03-17 12:25:07 -07:00
Teddy Reed
ace433e49d
Allow external calls from within registry
2015-02-23 21:35:54 -08:00
Teddy Reed
a29addba61
Extensions integrations testing
2015-02-22 22:56:18 -07:00
Teddy Reed
5810a35cec
Add a SQLiteDBManager
2015-02-11 15:27:45 -08:00
Teddy Reed
ed9bae29b7
Organizing headers/build for SDK
2015-02-03 14:59:32 -08:00
