osquery-1/osquery
Wesley Shields 67bf099207 YARA tests, SQL matching, sigfile loading
1. Minor refactoring.

- Generate one row per sigfile or sig_group.
- While here, when a signature file fails to compile, VLOG() it.

2. Bring in a couple of YARA tests.
Write a couple of tests for YARA functionality. Right now the only tests
make sure rules are compiled properly and that rules match where they
should and don't match where they shouldn't.

3. Allow sigfiles to be relative to /var/osquery.
- Also, only create a row if scanning happened.

4. Add pattern support to yara table.
- Also, optimize things so that rules are only compiled once.
2015-04-26 03:03:48 -07:00
..
config Major YARA refactor and enhancements 2015-04-26 03:01:28 -07:00
core Fix dameon flags loading from options 2015-04-24 11:37:51 -07:00
database Restrict permissions on RocksDB paths 2015-04-14 21:07:21 -07:00
devtools Fix --csv flag in osqueryi shell 2015-04-23 21:32:14 +00:00
dispatcher RHEL6 provisioning 2015-04-06 23:43:01 -07:00
distributed Extensions autoloading prequel 2015-03-04 18:51:41 -08:00
events Lint fixes and clang analyze 2015-04-17 09:18:46 -07:00
examples Ability to configure osquery from multiple files 2015-03-13 17:19:02 -07:00
extensions Move yara out of core/SDK into additional 2015-04-26 03:01:28 -07:00
filesystem Add launchd_overrides table 2015-04-15 23:19:23 -07:00
logger [Fix #907] Use glog to log to data-identified files 2015-03-30 12:49:57 -07:00
main Documentation updates 2015-04-10 14:31:34 -07:00
registry Declare extension registries 'external' 2015-03-30 02:03:26 -07:00
remote Creating interfaces for remote logging 2015-04-17 14:48:46 -07:00
sql [Fix #953] Check sqlite predicate expression passing 2015-04-07 01:20:05 -07:00
tables YARA tests, SQL matching, sigfile loading 2015-04-26 03:03:48 -07:00
CMakeLists.txt Add rpm_package_files table 2015-04-25 01:18:55 -07:00