Commit Graph

133 Commits

Author SHA1 Message Date
headmin
c18b2260e8 add Zentral remote TLS server info (#2582) 2016-10-03 08:21:27 -07:00
Teddy Reed
7e9088e008 [#2542] Introduce --enable_syslog to explicit enable syslog ingestion (#2543) 2016-09-27 17:35:21 -07:00
Zachary Wasserman
666198909a Add missing host_identifier in TLS enrollment request documentation (#2538) 2016-09-27 14:41:54 -07:00
Teddy Reed
a3477aa5dd docs: Windows 10 badge/install/flags (#2531) 2016-09-27 02:27:41 -07:00
Teddy Reed
1a43d4e4c3 Reorganize analysis tools/artifacts into analysis (#2497) 2016-09-21 15:15:25 -07:00
yying
c97118f2f8 Updates to Windows provisioning document (#2471) 2016-09-19 16:46:43 -07:00
Zachary Wasserman
7adf271570 Remove errant comma in example config JSON (#2474) 2016-09-16 13:20:42 -07:00
Teddy Reed
df1e3b9481 Add make fuzz (#2458) 2016-09-13 20:37:31 -07:00
Teddy Reed
080bc5ed88 Improve verbose logging for several linux event publishers (#2421) 2016-08-29 14:26:25 -07:00
Teddy Reed
02dd921d3b Introduce 'external' project builds: make externals (#2385) 2016-08-17 13:33:28 -07:00
Gary
87bc28e313 Added note to explain results from failed queries (#2376) 2016-08-16 08:39:43 -07:00
Teddy Reed
f93253ec48 Nitpicks and style formatting 2016-08-15 16:07:51 -07:00
Ryan Holeman
a217035d12 Add AWS STS assume role authentication capability 2016-08-15 16:07:51 -07:00
Teddy Reed
a2017f68f1 Add clang-format rules from 3.6 (#2360) 2016-08-15 01:33:17 -07:00
artemdinaburg
6e3f4b8e13 Copy required DLLs into the build directory (#2339) 2016-08-10 16:48:33 -07:00
Teddy Reed
e4dd78ec10 Build documentation for brew-based build (#2305) 2016-07-31 17:10:13 -07:00
yying
af7b910c24 Updated Windows provisioning documentation (#2294) 2016-07-28 12:08:20 -07:00
Zachary Wasserman
a7aac29465 Clarify events and database flags in osqueryi docs (#2269) 2016-07-21 12:53:17 -07:00
Zachary Wasserman
0483bed29d Fix broken links to FIM wiki page (#2272) 2016-07-21 12:33:46 -07:00
Teddy Reed
1e4dcb121b Introduce --audit_allow_sockets for Linux socket_events (#2270) 2016-07-20 23:47:54 -07:00
Teddy Reed
172363d3f5 Fix debug-kernel build and deploy dependencies (#2266) 2016-07-20 17:21:20 -07:00
Teddy Reed
edc3fa5a25 Remove process_file_events subscriber from Linux (#2267) 2016-07-20 17:20:23 -07:00
Nick Anderson
00935e28cc Moved windows provisioning script (#2257) 2016-07-19 16:47:51 -07:00
Peter
51f5fa9095 [#2216] Add notice text for required table predicates (#2225) 2016-07-08 08:33:37 -07:00
Ryan Holeman
88053a08b4 Optional top level decorator functionality (#2177) 2016-07-06 15:31:59 -07:00
d-yokoi
97f2850967 fix a typo error on the doc for building (#2172) 2016-06-19 23:24:42 -07:00
Ryan Holeman
b47f246ab4 Optional randomization of shard ids for AWS Kinesis load balancing (#2157) 2016-06-15 15:29:59 -07:00
Teddy Reed
0beb7efef7 Add process auditing and a SQL intro doc (#2129) 2016-06-01 17:28:51 -07:00
Teddy Reed
de8ef7b627 Update README/wiki for Ubuntu 16.04 (#2126) 2016-05-30 21:17:03 -07:00
Yonas Yanfa
d08e55545a Update index.md to mention support for FreeBSD. (#2118) 2016-05-27 14:01:54 -07:00
Ryan Holeman
e29ad573ef fixed issue with aws logger example for kinesis and firehose (#2102) 2016-05-18 09:21:32 -07:00
Marcin Wielgoszewski
484cf9c919 Add blurb about doorman (#2094) 2016-05-12 15:37:22 -07:00
Teddy Reed
d49c401324 Add decorators to example config (#2082) 2016-05-10 10:07:25 -07:00
Uma Reddy
e86a773a2e Update install-osx.md (#2071)
Add post-install notes for brew-based installs.
2016-05-06 08:31:22 -07:00
Teddy Reed
5a56805970 Introduce --utc flag to convert all calendar UNIX times to UTC (#2064)
Beginning in version 1.8.0 all time uses will converge on an osquery-provided
getUnixTime() API call that returns, by default, UNIX time integers converted
to UTC/GMT. The 'time' table will respond with the parsed time for the
configuration. If the timezone is not UTC then osquery is using localtime.

This configuration option will affect the 'unix_time' response in the 'time'
table. Because of this configurable-effect the table is extended to include
'local_time' which is always the system local UNIX time.
2016-05-03 13:00:31 -07:00
Teddy Reed
b6f09a7ecb Add action for snapshot query results (#2061) 2016-05-03 11:16:22 -07:00
Zachary Wasserman
10781e896e Add wiki docs for AWS logger plugins (#2052) 2016-04-25 16:20:01 -07:00
Mike Arpaia
8e73cf82d2 formatting changes for windows documentation 2016-04-19 10:25:28 -07:00
yying
0c15e1e732 Adding README explaining Windows provisioning and moved Windows provisioning README to development/, added it as link in navbar. Also added a mini-HOWTO section for running the provisioning script.
Adding README explaining Windows provisioning and moved Windows provisioning README to development/, added it as link in navbar.  Also added a mini-HOWTO section for running the provisioning script.
2016-04-19 09:38:18 -07:00
Zachary Wasserman
c4f9c14d5e Add docs for syslog tables 2016-04-05 11:01:10 -07:00
Teddy Reed
2379493721 Introduce decorator queries 2016-03-29 10:03:50 -07:00
Zachary Wasserman
0eff0f2f4e Collection of doc fixes
- Minor fix in creating tables documentation
- Fix docs for join
- Add note about config paths
- Update events docs
- Fix link to query packs
2016-03-25 14:12:41 -07:00
Uma Reddy
e421bfa54b Update extensions.md 2016-03-17 12:47:13 -04:00
Teddy Reed
8c3d2387e9 Add define to enable SQLite WHERETRACE 2016-03-04 20:41:06 -08:00
Teddy Reed
c3abb1ef38 Minor addition to multiple logger wiki docs 2016-02-23 10:42:08 -08:00
Teddy Reed
db3377a536 Merge pull request #1846 from zwass/logger_plugin_doc_edit
Update logger plugin docs
2016-02-12 10:13:20 -08:00
Zachary Wasserman
8eb4d2776b Update logger plugin docs
* Add explanation for how to  use multiple logger plugins
* Add syslog plugin to the (short) list of plugins in the CLI flags
* Make docs consistent by changing uses of "logging plugin" to "logger plugin"
2016-02-11 18:23:25 -08:00
Teddy Reed
089de478cd [#1810] Minor changes to extensions-use docs 2016-02-10 23:39:29 -08:00
Teddy Reed
1328aafcb3 [#1733] Document TLS client-auth and enroll notes 2016-02-01 09:37:10 -08:00
Teddy Reed
d0c550e987 [#1769] Remove reference to passwd_changes 2016-02-01 09:26:23 -08:00