Commit Graph

2228 Commits

Author SHA1 Message Date
Teddy Reed
98d91192b4 audit: Isolate the audit consumer logic into a thread (#3486) 2017-07-24 00:27:19 -07:00
Teddy Reed
9b7ce1b5ad logger: Fail all plugins if any fail (#3488) 2017-07-24 00:26:19 -07:00
Zachary Wasserman
b86869208d Fix error handling in AWS logger plugins (#3426) 2017-07-22 19:41:39 -07:00
uptycs-nishant
43046f48da Inotify: re-implemented remove/add subscription and remove/add monito… (#3459) 2017-07-21 20:00:34 -07:00
Nick Anderson
de0c0c0663 Updating windows system_info to return fqdn for hostname (#3470) 2017-07-21 11:22:07 -07:00
Nick Anderson
dfbcd50737 windows: Adding osqueryi and osqueryd integration tests (#3479) 2017-07-21 11:20:56 -07:00
Nick Anderson
891a6fb17a windows: Fixing watcher respawn logic for killed worker processes (#3475) 2017-07-21 11:10:06 -07:00
Mitchell Grenier
7801ac6dce Add mount to fsevents (#3480) 2017-07-20 09:44:38 -07:00
Mitchell Grenier
0c7059ed0a APFS Globbing Order Change (#3473) 2017-07-19 13:14:50 -07:00
Mitchell Grenier
951b009069 Fix a crash in interface_details on windows (#3478) 2017-07-18 18:38:01 -07:00
Teddy Reed
a9799a9426 Allow caching for tables with indexes and additionals (#3472) 2017-07-18 00:08:38 -07:00
Teddy Reed
d6184f62b5 Set config refresh to 1 hour and fix retry (#3469) 2017-07-17 22:28:11 -07:00
Mitchell Grenier
6fff46a20a Fix ad_config table regression from splitting preferences and plist (#3474) 2017-07-17 17:52:52 -07:00
Teddy Reed
57f04c4c49 General code cleanup for the config (#3467) 2017-07-17 11:38:21 -07:00
Teddy Reed
1e9feba506 pidfile: Update pidfile to /var/run on Linux and fbsd (#3457) 2017-07-07 17:57:31 -07:00
Lambda Conjecture
ecb9e2ccf2 Add Epoch marker to scheduled query results (#3378) 2017-07-07 17:56:03 -07:00
Teddy Reed
190e46f994 aws: Restore exception error printing and upgrade to 1.1.5 (#3456) 2017-07-02 20:44:06 -07:00
Teddy Reed
dacfbd4584 Separate preferences from plist and add user-concept (#3455) 2017-07-02 18:28:59 -07:00
Teddy Reed
99675fdbb2 audit: Increase speed when using socket_events (#3449) 2017-07-02 17:18:40 -07:00
ryanheffernan
5d7de135dd Adding URL Search hooks to ie_extensions table (#3452) 2017-06-30 11:12:43 -07:00
Nick Anderson
85d8af3996 carver: tar creation is now streamed (#3450) 2017-06-29 22:13:09 -07:00
Mitchell Grenier
9f9c729216 Fix test on High Sierra (#3451) 2017-06-29 16:46:04 -07:00
Teddy Reed
89ee28dcc4 watchdog: Fix disabled database and logging when watchdog is not used (#3448) 2017-06-28 23:24:18 -07:00
Teddy Reed
e3cafd53a3 tables: Add SSE bits to cpuid (#3446) 2017-06-28 16:00:05 -07:00
ryanheffernan
cf50143e69 Adding autoexec table for Windows (#3444) 2017-06-27 13:48:21 -07:00
ryanheffernan
80acd105f5 IE Extensions table for Windows - Browser Helper Objects (#3436) 2017-06-27 10:50:36 -07:00
Teddy Reed
617314c7df tables: Add flags to interface_details (#3439) 2017-06-25 14:12:01 -07:00
Allan Liu
256d113a74 Linux software RAID table (#3304) 2017-06-21 21:58:37 -07:00
Seshu Pasam
2fd90bd5c1 Custom directory flag for augeas lenses (#3428) 2017-06-20 20:54:27 -07:00
Seshu Pasam
dc02616967 Check number of columns returned from 'docker top' (#3429) 2017-06-20 20:16:13 -07:00
Zachary Wasserman
a0a6e56314 Fix shadow declaration in darwin broswer_plugins (#3423) 2017-06-20 20:15:51 -07:00
Teddy Reed
28c10a415f freebsd: Update Vagrantfile, config tests, and remove hidden visibility (#3419) 2017-06-18 18:30:57 -07:00
Teddy Reed
12daf75acd virtual tables: Build Linux cpu_time on FreeBSD (#3417) 2017-06-18 15:32:48 -07:00
Teddy Reed
c81c815f75 tables: Add symlink column to file table (#3390) 2017-06-18 14:42:40 -07:00
Teddy Reed
0e294f8095 build: Major change to building within shared folders (#3415) 2017-06-18 14:41:05 -07:00
Rohit Varkey Thankachan
6b211a19ad cpu_time on macos (#3392) 2017-06-18 14:28:07 -07:00
Teddy Reed
e75575ea66 build: Remove specific -mt from boost links (#3409) 2017-06-15 20:59:53 -07:00
Nicolas Bigaouette
23194c732d Replace hardcoded paths throughout code base (#3387) 2017-06-15 19:31:52 -07:00
Nick Anderson
c4b6b33ad1 carver: gating carver code in CMake (#3407) 2017-06-15 09:40:58 -07:00
Nick Anderson
cffa9cb7a3 Changing init verbosity to honor verbose flag (#3406) 2017-06-14 21:08:33 -07:00
Teddy Reed
445fc12648 tests: Record process start time in tests (#3405) 2017-06-13 17:53:05 -07:00
Teddy Reed
a65e7caad8 sqlite: Remove the explicit copy and add mutex to function carve (#3404) 2017-06-13 17:27:00 -07:00
Teddy Reed
f8f5718297 watcher: Do not initialize the config in watcher (#3403) 2017-06-13 17:26:34 -07:00
Teddy Reed
4f7abe963d Allow up to 64k rpm_package_files (#3402) 2017-06-13 13:22:55 -07:00
Teddy Reed
414cf83c6a logger: Re-add syslog logger plugin (#3401) 2017-06-13 00:23:54 -07:00
Rohit Varkey Thankachan
dfb6d84112 Load Averages on POSIX systems using getloadavg (#3396) 2017-06-10 15:25:20 -07:00
Nick Anderson
4aa4a983fc Triaging windows auto load extensions; (#3384) 2017-06-09 10:35:40 -07:00
Teddy Reed
8ad086098c watcher: Add initial watchdog delay (#3360) 2017-06-08 18:03:30 +01:00
Mitchell Grenier
31793c6773 Trying to apply xiangfan-ms' patch (#3340) 2017-06-07 09:51:22 -07:00
ryanheffernan
80aaed8b05 [Fix #3313] Adding driver version + adding malloc/pointer safety to drivers table (#3319) 2017-06-05 09:06:49 -07:00