Commit Graph

4114 Commits

Author SHA1 Message Date
Teddy Reed
a073bdc838
docs: Add short debugging note for events in osqueryi (#3993) 2017-12-12 21:27:09 -08:00
Seshu Pasam
f60e900b9a Upgrade OpenSSL to 1.0.2m and cacert PEM file to latest (#3981) 2017-12-12 21:26:10 -08:00
Alessandro Gario
e859276739 logging: Adds Windows Event Log support (#3887) 2017-12-12 14:15:38 -08:00
Nick Anderson
1dd6e1e693
ux: adding verbosity if osquery fails to read system uuid (#3989) 2017-12-08 08:17:40 -08:00
D Lohachov
3e83bfbe4a Persistent hashing of `hash' virtual table (#3814) 2017-12-06 08:35:07 -08:00
Nick Anderson
9726d41c7c
build: adding helper function to add paths to SYSTEM path (#3986) 2017-12-05 10:43:20 -08:00
Nick Anderson
6d576e93d8
events: removing newline from windows event log lines (#3985) 2017-12-05 10:42:48 -08:00
Teddy Reed
90ae0c87e7
deps: Update librdkafka 0.11.1 bottle hashes (#3987) 2017-12-04 20:19:30 -08:00
Brad Moylan
9f62c04f15 docs: Document --host_identifier=specified CLI option (#3974) 2017-12-04 11:03:56 -08:00
Chris Long
0bfba4ff74 Adding OSX detection for HiddenLotus (#3982) 2017-12-03 18:45:50 -08:00
uptycs-nishant
473920d601 Removing cpp-netlib name references (#3978) 2017-11-30 11:08:48 -08:00
Teddy Reed
d72d43af86
deps: Update db, librpm, and zstd libs for Linux and Darwin (#3980) 2017-11-30 11:08:15 -08:00
Tom Crayford
fb354b7d22 only daemon-reload if systemd is running (#3979) 2017-11-30 09:18:00 -08:00
Seshu Pasam
1c141995a3 Kafka SSL support (#3921) 2017-11-30 09:13:46 -08:00
Teddy Reed
e8cd9f139b
deps: Label licenses for library formulas (#3976) 2017-11-30 08:28:05 -08:00
Teddy Reed
13dfd0148c
audit: Force include and source files to be 100644 (#3971) 2017-11-30 02:01:04 -08:00
Nick Anderson
1097827ca2
daemon: set service status to SERVICE_STOPPED on exit (#3973) 2017-11-29 21:12:49 -08:00
Nick Anderson
61c404efdd
[Fix #3964] Returning exit code in powershell build script (#3972) 2017-11-29 08:03:48 -08:00
Reed Loden
6b6723110f tables: Add linux shadow table (#3902) 2017-11-28 00:51:44 -08:00
Teddy Reed
03984bc9a9
watcher: Use min for delay max and delay current (#3969) 2017-11-28 00:50:18 -08:00
Alexandre Fiori
5ffe9e91d1 build: Allow building as non-root on MacOS via pip user switch (#3968) 2017-11-28 00:01:42 -08:00
Mike Myers
b79c0e2621 Local Groups table for Windows (#3855) 2017-11-27 23:51:47 -08:00
Omer Katz
595fd11284 tables: augeas: Remove trailing slash from /files prefix (#3967) 2017-11-27 11:38:02 -08:00
Nick Anderson
6068d61068
tables: adding intel_me_info virtual table on Windows (#3960) 2017-11-27 11:26:08 -08:00
Teddy Reed
ee17e7e6f0
extensions: Fix path quotes on Windows (#3965) 2017-11-27 07:17:43 -08:00
Teddy Reed
bfb4061f39
remote: Remove legacy OpenSSL SSL symbol defines (#3961) 2017-11-27 00:29:57 -08:00
Omer Katz
6aa2648472 Augeas table performance imporvements (#3911) 2017-11-26 20:29:27 -08:00
Mitchell Grenier
7c95e98551
Fix Ryzen Core Count (#3432) 2017-11-22 20:33:09 -08:00
uptycs-nishant
9d46d9cb5f http_client: Fix for issue-3953 (#3958) 2017-11-22 16:26:54 -08:00
Teddy Reed
1cedf8d573
tables: Add basic Intel ME table returning version (#3956) 2017-11-22 00:39:18 -08:00
Mitchell Grenier
a73233263b Renaming the key_events table to user_interaction_events and adding mouse down (#3951) 2017-11-21 23:43:52 -08:00
Chris Long
93850b69f9 Adding detection for new "Symantec" Proton variant (#3952) 2017-11-21 23:27:04 -08:00
Nick Anderson
1239c8ccc5
tables: expanding windows programs table to encompass apps without GUID (#3945) 2017-11-20 08:21:21 -08:00
Nick Anderson
3d7f7cf037
tables: adding type column to users table to differentiate local users (#3946) 2017-11-20 08:21:06 -08:00
Nick Anderson
cb401f9ded
tables: adding certificate store to the cert path for Windows table (#3947) 2017-11-20 08:20:52 -08:00
Teddy Reed
3ad5267642
[Fix #3941] Stop renaming worker and extension argv[0] (#3943) 2017-11-20 07:24:55 -08:00
Teddy Reed
80cebc8318
extensions: Add 5min timeouts for read and send client calls (#3847) 2017-11-20 07:23:41 -08:00
Teddy Reed
120c0ee62e
Stop latent autoloaded extensions and apply an initial delay (#3944) 2017-11-19 18:56:42 -08:00
Teddy Reed
16d92d1dc6
docs: Remove quotes from flags documentation (#3937) 2017-11-18 15:22:33 -08:00
Teddy Reed
523ad777a8
[Fix #3931] Remove removed results correctly (#3938) 2017-11-18 15:21:11 -08:00
Chris Long
8e10156a1f Creating a windows-hardening pack and moving queries there (#3935) 2017-11-18 09:20:53 -08:00
Nick Anderson
ec2fc1a0c1
deployment: allowing for extra files to be bundled (#3936) 2017-11-17 09:23:10 -08:00
Teddy Reed
3f1a90c56b
website: Update building osquery blog article with office hours (#3933) 2017-11-16 15:01:24 -08:00
Teddy Reed
5ad0e599fc
website: Small blog post about community efforts (#3932) 2017-11-16 12:28:42 -08:00
Nick Anderson
582f638706
deploy: allowing for MSI packages to upgrade previous installers (#3927) 2017-11-16 07:50:01 -08:00
Nick Anderson
e43cb5f6fb
packs: fixing malformed win attack pack (#3928) 2017-11-15 21:46:48 -08:00
Nick Anderson
f7fe7861e2
docs: Adding details on installing osquery on Windows as a service (#3705) 2017-11-15 13:20:22 -08:00
Nick Anderson
da5106f78c
packs: updating query versions in windows attack packs (#3926) 2017-11-14 20:48:21 -08:00
isairamm
4d4a84e370 packs: Query to identify ccleaner malware (#3790) 2017-11-14 20:44:39 -08:00
Teddy Reed
d34d62186d
website: Add 2.10.2 release (#3925) 2017-11-14 18:36:12 -08:00