Commit Graph

4086 Commits

Author SHA1 Message Date
Vishwa Shah
c54c6e6c0e corrected size in block_devices on darwin, linux (#3539) 2017-08-07 19:21:18 -07:00
Hugh Neale
2b48fbc557 A fix for Mac OSX process start_time (#3534) 2017-08-07 17:49:12 -07:00
Mitchell Grenier
8a963e8d40 [Distributed] Moving to RapidJSON (#3265) 2017-08-07 16:34:44 -07:00
Mitchell Grenier
b22a403bf1 OpenBSM Events (#3503) 2017-08-07 16:02:16 -07:00
Nick Anderson
b4316a57a0 tables: Adding certificates virtual table for windows (#3498) 2017-08-07 09:08:53 -07:00
Nick Anderson
405ec99476 Adding threads and start_time fields to processes table (#3536) 2017-08-06 20:58:18 -07:00
Nick Anderson
0ef2037bd4 Updating package path written to stdout for deployment (#3537) 2017-08-06 20:58:05 -07:00
Teddy Reed
3dd5fcadcb deps: Fix libdpkg download url (#3535) 2017-08-06 16:57:07 -07:00
Seshu Pasam
9dc69ee282 Minor static analysis fixes. (#3529) 2017-08-04 18:22:10 -07:00
Zachary Wasserman
af444370f4 Fix memory leaks in Gatekeeper table (#3531) 2017-08-04 18:19:50 -07:00
Mitchell Grenier
e577a76b9b macOS - Listeners on folders that throw mount events (#3506) 2017-08-03 18:09:04 -07:00
Seshu Pasam
34a6cfe74e Option to skip ccache for running static analysis tools like coverity (#3526) 2017-08-03 18:02:26 -07:00
Nick Anderson
c34d9f8348 windows: Updating various chocolatey powershell build scripts (#3427) 2017-08-03 18:01:10 -07:00
Seshu Pasam
32ad42aea0 EC2 instance metadata implementation. (#3502) 2017-08-03 17:54:17 -07:00
Nick Anderson
ea5f06bfc5 [Fix #3527] Addressing interface indexing in arp_cache table (#3528) 2017-08-03 17:49:58 -07:00
Teddy Reed
7ca18f5a32 audit: Add cwd to process_events on Linux (#3525) 2017-08-03 08:21:15 -07:00
Teddy Reed
d581be4ef0 Fix #3522: Do not call SQL ctor directly (#3524) 2017-08-02 20:20:19 -07:00
Teddy Reed
2e54af369d deps: Update AWS-SDK 1.1.20 bottles (#3523) 2017-08-02 20:20:00 -07:00
Seshu Pasam
6495f14828 EC2 instance tags implementation. (#3507) 2017-08-02 13:40:59 -07:00
Teddy Reed
b56accb089 format: Remove Cpp restriction (#3521) 2017-08-02 10:32:12 -07:00
Teddy Reed
0b0c5febd1 tables: Add device_firmware to darwin (#3499) 2017-08-02 09:48:09 -07:00
Jason Meller
8ba9a54daa tables: Implement sharing_preferences table for Darwin (#3509) 2017-08-02 09:30:35 -07:00
Jason Meller
c4010bd306 tables: Implement shared folders table for Darwin (#3510) 2017-08-01 20:33:57 -07:00
Seshu Pasam
9b3be1c02d Fixes from static code analysis (#3512) 2017-08-01 20:13:25 -07:00
bobsaintcool
217d7daa49 build: Add debian9 vagrant target (#3520) 2017-08-01 20:11:10 -07:00
bobsaintcool
44d1a82bbc deps: Add a dep for running make sysprep (#3519) 2017-08-01 20:09:55 -07:00
Teddy Reed
90c6a44599 freebsd: Some refactoring to processes table (#3442) 2017-08-01 16:58:26 -07:00
Teddy Reed
a2faa3db37 deps: Add bottle for macOS for bison (#3518) 2017-08-01 16:46:27 -07:00
Teddy Reed
e13b7a44e2 deps: Add bottles for linux and macOS for zstd (#3517) 2017-08-01 15:43:52 -07:00
Teddy Reed
30aae77259 extensions: Call wait on all extensions before respawning (#3516) 2017-08-01 15:16:22 -07:00
Mitchell Grenier
ba5f75489f Fix linuxbrew (#3514) 2017-08-01 11:57:18 -07:00
Mitchell Grenier
ba35a92243 Expand Carver APIs and Add Compression (#3386) 2017-07-31 11:11:45 -07:00
Seshu Pasam
5b42749d93 Some "make audit" output fixes. (#3508) 2017-07-31 11:06:08 -07:00
Chris Long
be1a943616 (#3500) Add Check for Additional Leverage Variant 2017-07-31 10:42:33 -07:00
Mitchell Grenier
383a39b407 Pull taps forward to unbreak make deps (#3505) 2017-07-28 13:57:10 -07:00
Jason Meller
b9fbf583d0 Darwin: Add gatekeeper tables (#3461) 2017-07-27 10:51:31 -07:00
Nick Anderson
45602bd443 Waiting for info log in tests (#3494) 2017-07-24 22:09:59 -07:00
Chris Long
b913029ee0 Adding osx_fruitfly to osx-attacks (#3493) 2017-07-24 22:00:43 -07:00
Rohit Varkey Thankachan
3cd26ac48c Add collisions to the interface_details table (#3491) 2017-07-24 13:51:50 -07:00
Nick Anderson
30e5b89df8 Adding in additional program installation locations (#3484) 2017-07-24 09:22:20 -07:00
Teddy Reed
295acfcf3d worker: Do not ignore SIGCHLD to exit faster (#3487) 2017-07-24 08:48:06 -07:00
Teddy Reed
30a9f23cb0 tsan: Fix watcher and posix utils tsan findings (#3489) 2017-07-24 07:19:31 -07:00
Teddy Reed
98d91192b4 audit: Isolate the audit consumer logic into a thread (#3486) 2017-07-24 00:27:19 -07:00
Teddy Reed
9b7ce1b5ad logger: Fail all plugins if any fail (#3488) 2017-07-24 00:26:19 -07:00
Teddy Reed
e4c0557e1b sqlite: Update third-party to include SQLite 3.19.3 (#3485) 2017-07-22 19:44:29 -07:00
Zachary Wasserman
b86869208d Fix error handling in AWS logger plugins (#3426) 2017-07-22 19:41:39 -07:00
uptycs-nishant
43046f48da Inotify: re-implemented remove/add subscription and remove/add monito… (#3459) 2017-07-21 20:00:34 -07:00
Nick Anderson
82ad577d14 Ensuring info log path exists before testing (#3483) 2017-07-21 14:49:11 -07:00
Nick Anderson
de0c0c0663 Updating windows system_info to return fqdn for hostname (#3470) 2017-07-21 11:22:07 -07:00
Nick Anderson
dfbcd50737 windows: Adding osqueryi and osqueryd integration tests (#3479) 2017-07-21 11:20:56 -07:00