Commit Graph

162 Commits

Author SHA1 Message Date
mike@arpaia.co
c9fb930ee4 OS specific table specs directory structure 2014-08-20 01:14:20 -07:00
mike@arpaia.co
cd1e746069 special 't' target in the Makefile to just build the code and run tests without regenerating table files 2014-08-20 01:04:35 -07:00
mike@arpaia.co
007a2e3519 Merge branch 'master' of github.com:facebook/osquery 2014-08-20 00:58:36 -07:00
mike@arpaia.co
3e73e641df Adding tools C++ files to the make format target 2014-08-20 00:58:27 -07:00
Mike Arpaia
11271f2f99 Update README.md 2014-08-20 00:55:48 -07:00
Mike Arpaia
ca37f1a278 Merge pull request #56 from facebook/osx-deploy
Deployment infrastructure for OS X
2014-08-20 00:53:06 -07:00
mike@arpaia.co
9451cef6e5 Deploy infrastructure for OS X 2014-08-20 00:47:14 -07:00
mike@arpaia.co
1159da9d1e moving table generation to it's own Makefile target so that make build doesn't generate all of the tables 2014-08-19 22:02:18 -07:00
mike@arpaia.co
807a3617c2 Removing example table 2014-08-19 21:49:42 -07:00
Mike Arpaia
f08ab26841 Merge pull request #60 from facebook/vtable_routes
[vtable_routes] Added vtable for various network routes
2014-08-19 21:46:36 -07:00
Teddy Reed
42d7f982e9 [vtable_routes] Added vtable for various network routes 2014-08-19 21:39:16 -07:00
mike@arpaia.co
ca33035aca adding objective-c++ files to the format shortcut 2014-08-19 20:19:17 -07:00
mike@arpaia.co
fbc37d9399 clang-format on objective-c++ files 2014-08-19 20:18:49 -07:00
Mike Arpaia
b8e823f190 Merge pull request #58 from facebook/plist_parsing
fixing an issue with json serializing raw data attributes in plists
2014-08-19 20:09:14 -07:00
mike@arpaia.co
745b74c7de fixing an issue with json serializing raw data attributes in plists 2014-08-19 18:54:03 -07:00
Mike Arpaia
fc6888b62f Merge pull request #57 from facebook/vtable_ports
[vtable_listening_ports] Listening sockets, IPv4, IPv6
2014-08-19 15:27:29 -07:00
Teddy Reed
95ceb21ec5 [vtable_listening_ports] Listening sockets, IPv4, IPv6 2014-08-19 15:25:16 -07:00
Mike Arpaia
2c1406f0a4 Merge pull request #55 from facebook/vtable_systrust
[vtable_cacerts] New CA certificates table.
2014-08-19 15:20:56 -07:00
Teddy Reed
444cea0649 [vtable_cacerts] New CA certificates table. 2014-08-19 13:47:09 -07:00
mike@arpaia.co
47f43bb24b updating gentable to accept the correct parameters 2014-08-19 01:26:51 -07:00
Mike Arpaia
c71241d294 Merge pull request #50 from facebook/launchd
Apple virtual table for LaunchAgents and LaunchDaemons
2014-08-15 13:46:28 -07:00
mike@arpaia.co
3760e4cce5 Apple virtual table for LaunchAgents and LaunchDaemons 2014-08-15 13:46:09 -07:00
Mike Arpaia
2352a51a22 Merge pull request #49 from facebook/applications
OS X virtual tables for currently installed applications
2014-08-15 12:58:54 -07:00
mike@arpaia.co
9973335e49 OS X virtual tables for currently installed applications 2014-08-15 12:58:19 -07:00
mike@arpaia.co
d1d5d1e1ab update the formatting in .clang-format 2014-08-15 12:41:47 -07:00
Mike Arpaia
145286b444 Merge pull request #52 from facebook/clang-format-fb
Ran clang-format across the codebase
2014-08-15 12:30:13 -07:00
mike@arpaia.co
e723306c13 Ran clang-format across the codebase 2014-08-15 12:29:51 -07:00
Mike Arpaia
616d665a86 Update README.md 2014-08-14 19:47:35 -07:00
mike@arpaia.co
f1b0bef782 listFilesInDirectory 2014-08-14 16:27:20 -07:00
Mike Arpaia
2689fa97c7 Update README.md 2014-08-14 16:12:58 -07:00
mike@arpaia.co
f6e6629d98 fixing include path in osx_version.mm 2014-08-14 11:35:30 -07:00
Mike Arpaia
3161e8cfeb Merge pull request #48 from facebook/firewall
Virtual table for Apple's application level firewall
2014-08-14 11:33:53 -07:00
mike@arpaia.co
1a381e0feb Virtual tables for Apple's application level firewall 2014-08-14 11:33:20 -07:00
mike@arpaia.co
2311022e7f moving cocoa backports to core/osx 2014-08-13 23:20:58 -07:00
Mike Arpaia
b62033475f Update README.md 2014-08-13 16:58:53 -07:00
mike@arpaia.co
826f9d9905 adding an example of what happens when you pt::ptree::get something that doesn't exist 2014-08-13 12:12:24 -07:00
mike@arpaia.co
7d1ce83183 fixing the unit test in filesystem 2014-08-13 11:55:29 -07:00
Mike Arpaia
5f9a24202f Merge pull request #42 from facebook/kexts
Loaded kernel extensions vtable
2014-08-13 11:49:48 -07:00
mike@arpaia.co
e2bd07008d [kextstat] osquery virtual table which uses the Core Foundation APIs to
expose kernel extension information.

For information about memory managament in Core Foudnation, see:
https://developer.apple.com/library/ios/documentation/CoreFoundation/Conceptual/CFMemoryMgmt/Concepts/Ownership.html#//apple_ref/doc/uid/20001148-103029
2014-08-13 11:48:53 -07:00
Mike Arpaia
702d53af10 Merge pull request #47 from facebook/system_version
osx_version table which exposes the major, minor and patch version of the operating system
2014-08-13 11:44:14 -07:00
Mike Arpaia
609f0bbf07 Merge pull request #46 from facebook/plist_parsing
property list parsing with native C++ data types
2014-08-13 11:43:27 -07:00
mike@arpaia.co
b65f96d666 osx_version table which exposes the major, minor and patch version of
the operating system
2014-08-13 11:02:17 -07:00
mike@arpaia.co
3b85618ae0 property list parsing with native C++ data types 2014-08-13 11:00:28 -07:00
Teddy Reed
1b6ef08611 Silencing various compiler errors for goto statements. 2014-08-13 08:56:39 -07:00
Mike Arpaia
25ecc35a98 Merge pull request #44 from facebook/vtable_nvram
[vtable_nvram] Added NVRAM variables vtable (name, variable type, value).
2014-08-12 18:09:31 -07:00
Teddy Reed
83dc09bca3 [vtable_nvram] Various code cleanups 2014-08-12 11:43:38 -07:00
mike@arpaia.co
9309ef4db5 table development readme updates 2014-08-12 11:38:01 -07:00
Teddy Reed
1888150596 [vtable_nvram] Added NVRAM variables vtable (name, variable type, value). 2014-08-12 00:02:38 -07:00
mike@arpaia.co
845cb6ef3b more sane formatting by default in the repl 2014-08-11 22:38:51 -07:00
mike@arpaia.co
2862407079 fixing a spacing issue in the repl so that multi-line SQL statements are aligned properly 2014-08-11 21:57:16 -07:00