Commit Graph

3168 Commits

Author SHA1 Message Date
Teddy Reed
c7ee4f9ca4 Add librpm build and RPM tables (#2456) 2016-09-12 22:43:36 -07:00
Teddy Reed
53364b3cb5 Check for plist existance before attempting parsing (#2450) 2016-09-12 22:41:23 -07:00
Teddy Reed
a6ea7d6f6e Fix potential cast issue in memory_info (#2457) 2016-09-12 22:40:51 -07:00
Mitchell Grenier
072a93ccac Accelerated checkins (#2454) 2016-09-12 16:53:42 -07:00
yying
a27d6567e4 Core and Additional Tests (#2441) 2016-09-12 09:46:52 -07:00
Teddy Reed
817cb7ebd4 Fix minor sandboxes performance issues and plist parsing exceptions (#2455) 2016-09-09 19:45:37 -07:00
Nick Anderson
5060392b06 Multiple bug fixes in crashes (#2447) 2016-09-09 15:10:11 -07:00
Teddy Reed
71fff517e5 Add warning for event-based table without events (#2449) 2016-09-08 15:44:32 -07:00
Mitchell Grenier
61c9da1c42 Buffer the distributed queries to RocksDB for greater reliability (#2452) 2016-09-08 15:40:14 -07:00
Serey Ty
d778ed357f add query to detect Backdoor.OSX.Mokes.a (#2448) 2016-09-07 21:03:01 -07:00
Nick Anderson
467f9b3409 Adding Bool and String Array WMI Wrapper functions (#2430) 2016-09-07 18:04:33 -07:00
Teddy Reed
1a5f36c715 deps: CMake 3.6.1 (#2440) 2016-09-07 16:30:15 -07:00
Teddy Reed
ea9ef3211c Change schedule and distributed log execution status text (#2445) 2016-09-07 15:35:28 -07:00
Teddy Reed
1bc52f8a50 [Fix #2443] Restore shellstaticFunc argument names (#2444) 2016-09-07 14:28:56 -07:00
Ryan Holeman
6f919429ff added env flag to create *nix packages with a tls server certs file (#2442) 2016-09-07 13:16:59 -07:00
Nick Anderson
7b8bd9657d Adding clang-format to provisioning (#2437) 2016-09-06 16:42:20 -07:00
Nick Anderson
01011f4d0f Fixed bug in MULTI_SZ processing (#2439) 2016-09-06 16:41:57 -07:00
Philip J Beyer
4f6c802c7b Corrects Linux package script reference (#2415)
Corrects reference to example config in Linux package script.
2016-09-06 16:41:04 -07:00
Teddy Reed
81d8a4aa68 Emit warnings for improper 'osquery' table usage (#2432) 2016-09-02 19:13:37 -07:00
yying
84e6a3401a Reducing compiler warnings and fails on warn in VS (#2433) 2016-09-02 15:04:03 -07:00
Nick Anderson
7c90823a0c Upgrade LLVM to 3.8.1 on Linux (#2436) (#2435) 2016-09-02 14:53:04 -07:00
Teddy Reed
111dadf8a0 Upgrade LLVM to 3.8.1 on Linux (#2436) 2016-09-02 07:59:10 -07:00
Teddy Reed
b61bbdbae3 Remove OpenSSL and cpp-netlib old version exceptions (#2413) 2016-08-31 17:32:50 -07:00
yying
d347c847e1 Support for extensions (#2363) 2016-08-31 16:45:06 -07:00
Teddy Reed
65dd56e113 Introduce table 'attributes' (#2431) 2016-08-31 15:32:20 -07:00
Teddy Reed
d6e20279d8 Use LOG(INFO) and set INFO as default logging mode (#2420)
This is fairly important, it changes the default mode for what status
events are logged to INFO. It had been set to WARNING and INFO was relatively
unused.

This also removes expected support for RocksDB 'in-memory' databases.
If a shell-user requests a database via CLI flags it will now work.
2016-08-31 15:09:01 -07:00
Teddy Reed
080bc5ed88 Improve verbose logging for several linux event publishers (#2421) 2016-08-29 14:26:25 -07:00
Teddy Reed
49ee904aea Add .list and .socket to shell meta command set (#2418) 2016-08-29 12:37:04 -07:00
Teddy Reed
0b3f6af306 Improve status logging when using multi-loggers (#2422) 2016-08-29 06:59:55 -07:00
Teddy Reed
05a795d80a Count subscriber events correctly in osquery_events (#2419)
This also changes the osquery_events API by renaming restarts to refreshes.
2016-08-29 06:57:24 -07:00
Teddy Reed
9824e6bd58 Rename phys_footprint to total_size and add threads (#2412) 2016-08-29 06:56:38 -07:00
Teddy Reed
6d1e73d729 Handle empty Linux pwd members (#2417) 2016-08-29 06:55:22 -07:00
Teddy Reed
89b1b6f3ff Fix Linux memory_map printing and use IOMEM instead (#2416) 2016-08-29 06:54:10 -07:00
Nick Anderson
bcb5edc464 Refactoring Win provisioning to prevent duplicate installations (#2411) 2016-08-28 23:00:26 -07:00
Teddy Reed
1bff276fcf Increase TLS client timeout from 4s to 32s (#2410) 2016-08-27 13:12:48 +01:00
artemdinaburg
7915b579ee Load VS variables for amd64 native build prior to launching cmake (#2408) 2016-08-26 11:42:18 +01:00
Teddy Reed
69dc5d3210 [skip ci] Update RocksDB bottle hashes 4.9 (#2409) 2016-08-25 17:43:38 +01:00
Teddy Reed
132fa3a753 Display flags in alphabetical order (#2407) 2016-08-24 17:44:16 +01:00
Omer Katz
15dd15ee38 Bump rocksdb to 4.9 (#2404) 2016-08-24 17:02:51 +01:00
Nick Anderson
e6d4f36ebb Adding etc_hosts virtual table to windows (#2381) 2016-08-24 17:02:14 +01:00
Teddy Reed
84e65d1141 Remove various provision files (#2406) 2016-08-24 13:40:35 +01:00
Michael McGrew
a14961d868 Minor fixes to cb_info table (#2399) 2016-08-22 23:29:22 +01:00
yying
2f1cad864d Support for building static osquery executable (#2398) 2016-08-22 23:27:12 +01:00
Nick Anderson
f1d6686735 Fixed type bug with DWORD registry values (#2383) 2016-08-18 10:12:30 -07:00
Nick Anderson
fe7b8d98f9 Adding getSystemRoot function (#2386)
Adding a cross platform function for getting the OS root
and returning it as a boost::fs::path
2016-08-18 09:32:34 -07:00
Teddy Reed
1b75972181 [Fix #2387] Attempt to create user's osquery homedir (#2395) 2016-08-17 17:27:46 -07:00
Teddy Reed
e969b92a2e Fix code auditing job and disable Homebrew auto-update (#2392) 2016-08-17 16:00:30 -07:00
Teddy Reed
02dd921d3b Introduce 'external' project builds: make externals (#2385) 2016-08-17 13:33:28 -07:00
Nick Anderson
feb18c6173 Adding install/uninstall flags to daemon (#2379) 2016-08-17 09:23:11 -07:00
Michael McGrew
a0e83466d2 Add table for pulling back carbon black sensor info (#2377) 2016-08-16 21:56:29 -07:00