From f08cf6c11cd9e1e7a3f697e5dc7ccaee2d65d711 Mon Sep 17 00:00:00 2001 From: Luke Heath Date: Wed, 24 Aug 2022 16:03:35 -0500 Subject: [PATCH] Remove FreeBSD references from website, UI, and query library (#7279) --- .../standard-query-library.yml | 27 +-- .../DataTable/PlatformCell/PlatformCell.tsx | 1 - .../QuerySidePanel/QuerySidePanel.tsx | 7 - frontend/interfaces/osquery_table.ts | 2 +- frontend/interfaces/platform.ts | 4 +- frontend/osquery_tables.json | 186 +++++------------- frontend/utilities/constants.ts | 1 - website/views/pages/query-detail.ejs | 9 +- website/views/pages/query-library.ejs | 6 - 9 files changed, 65 insertions(+), 178 deletions(-) diff --git a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml index 4749f2bafb..373a4966f5 100644 --- a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml +++ b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml @@ -48,7 +48,7 @@ apiVersion: v1 kind: query spec: name: Get installed Chrome Extensions - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: List installed Chrome Extensions for all users. query: SELECT * FROM users CROSS JOIN chrome_extensions USING (uid); purpose: Informational @@ -57,17 +57,6 @@ spec: --- apiVersion: v1 kind: query -spec: - name: Get installed FreeBSD software - platforms: FreeBSD - description: Get all software installed on a FreeBSD computer, including browser plugins and installed packages. Note that this does not include other running processes in the processes table. - query: SELECT name AS name, version AS version, 'Browser plugin (Chrome)' AS type, 'chrome_extensions' AS source FROM chrome_extensions UNION SELECT name AS name, version AS version, 'Browser plugin (Firefox)' AS type, 'firefox_addons' AS source FROM firefox_addons UNION SELECT name AS name, version AS version, 'Package (Atom)' AS type, 'atom_packages' AS source FROM atom_packages UNION SELECT name AS name, version AS version, 'Package (Python)' AS type, 'python_packages' AS source FROM python_packages UNION SELECT name AS name, version AS version, 'Package (pkg)' AS type, 'pkg_packages' AS source FROM pkg_packages; - purpose: Informational - tags: inventory - contributors: zwass ---- -apiVersion: v1 -kind: query spec: name: Get installed Linux software platforms: Linux @@ -125,7 +114,7 @@ apiVersion: v1 kind: query spec: name: Get current users with active shell/console on the system - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Get current users with active shell/console on the system and associated process query: SELECT user,host,time, p.name, p.cmdline, p.cwd, p.root FROM logged_in_users liu, processes p WHERE liu.pid = p.pid and liu.type='user' and liu.user <> '' ORDER BY time; purpose: Informational @@ -136,7 +125,7 @@ apiVersion: v1 kind: query spec: name: Get unencrypted SSH keys for local accounts - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Identify SSH keys created without a passphrase which can be used in Lateral Movement (MITRE. TA0008) query: SELECT uid, username, description, path, encrypted FROM users CROSS JOIN user_ssh_keys using (uid) WHERE encrypted=0; purpose: Informational @@ -148,7 +137,7 @@ apiVersion: v1 kind: query spec: name: Get unencrypted SSH keys for domain-joined accounts - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Identify SSH keys created without a passphrase which can be used in Lateral Movement (MITRE. TA0008) query: SELECT uid, username, description, path, encrypted FROM users CROSS JOIN user_ssh_keys using (uid) WHERE encrypted=0 and username in (SELECT distinct(username) FROM last); purpose: Informational @@ -195,7 +184,7 @@ apiVersion: v1 kind: query spec: name: Get network interfaces - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Network interfaces MAC address query: SELECT a.interface, a.address, d.mac FROM interface_addresses a JOIN interface_details d USING (interface) WHERE address not in ('127.0.0.1', '::1'); purpose: informational @@ -206,7 +195,7 @@ apiVersion: v1 kind: query spec: name: Get local user accounts - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Local user accounts (including domain accounts that have logged on locally (Windows)). query: SELECT uid, gid, username, description, directory, shell FROM users; purpose: informational @@ -228,7 +217,7 @@ apiVersion: v1 kind: query spec: name: Get Nmap scanner - platforms: macOS, Linux, Windows, FreeBSD + platforms: macOS, Linux, Windows description: Get Nmap scanner process, as well as its user, parent, and process details. query: SELECT p.pid, name, p.path, cmdline, cwd, start_time, parent, (SELECT name FROM processes WHERE pid=p.parent) AS parent_name, @@ -299,7 +288,7 @@ spec: name: Get local administrator accounts on macOS platforms: macOS description: The query allows you to check macOS systems for local administrator accounts. - query: SELECT uid, username, type, group name FROM users u JOIN groups g ON g.gid = u.gid; + query: SELECT uid, username, type FROM users u JOIN groups g ON g.gid = u.gid; purpose: Informational tags: hunting, inventory contributors: alphabrevity diff --git a/frontend/components/TableContainer/DataTable/PlatformCell/PlatformCell.tsx b/frontend/components/TableContainer/DataTable/PlatformCell/PlatformCell.tsx index 5ae96d02c1..5bbb6adfd1 100644 --- a/frontend/components/TableContainer/DataTable/PlatformCell/PlatformCell.tsx +++ b/frontend/components/TableContainer/DataTable/PlatformCell/PlatformCell.tsx @@ -19,7 +19,6 @@ const DISPLAY_ORDER = [ "darwin", "linux", "windows", - // "freebsd", // "None", // "Invalid query", ]; diff --git a/frontend/components/side_panels/QuerySidePanel/QuerySidePanel.tsx b/frontend/components/side_panels/QuerySidePanel/QuerySidePanel.tsx index 31d2805db5..d57a5c5583 100644 --- a/frontend/components/side_panels/QuerySidePanel/QuerySidePanel.tsx +++ b/frontend/components/side_panels/QuerySidePanel/QuerySidePanel.tsx @@ -114,13 +114,6 @@ const QuerySidePanel = ({ {PLATFORM_DISPLAY_NAMES[platform] || platform} ); - } else if (platform === "freebsd") { - return ( -
  • - {" "} - {PLATFORM_DISPLAY_NAMES[platform]} -
  • - ); } platform = platform.toLowerCase(); let icon = ( diff --git a/frontend/interfaces/osquery_table.ts b/frontend/interfaces/osquery_table.ts index 2095a23683..0673e84366 100644 --- a/frontend/interfaces/osquery_table.ts +++ b/frontend/interfaces/osquery_table.ts @@ -38,7 +38,7 @@ export const DEFAULT_OSQUERY_TABLE: IOsqueryTable = { description: "Local user accounts (including domain accounts that have logged on locally (Windows)).", url: "https://github.com/osquery/osquery/blob/master/specs/users.table", - platforms: ["darwin", "linux", "windows", "freebsd"], + platforms: ["darwin", "linux", "windows"], evented: false, cacheable: false, columns: [ diff --git a/frontend/interfaces/platform.ts b/frontend/interfaces/platform.ts index 327a0e99c2..c018827917 100644 --- a/frontend/interfaces/platform.ts +++ b/frontend/interfaces/platform.ts @@ -4,9 +4,7 @@ export type IOsqueryPlatform = | "windows" | "Windows" | "linux" - | "Linux" - | "freebsd" - | "FreeBSD"; + | "Linux"; export type IPlatformString = | "" diff --git a/frontend/osquery_tables.json b/frontend/osquery_tables.json index 8397039389..24f1a1ed6f 100644 --- a/frontend/osquery_tables.json +++ b/frontend/osquery_tables.json @@ -827,7 +827,7 @@ "name": "arp_cache", "description": "Address resolution cache, both static and dynamic (from ARP, NDP).", "url": "https://github.com/osquery/osquery/blob/master/specs/arp_cache.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -983,7 +983,7 @@ "name": "atom_packages", "description": "Lists all atom packages in a directory or globally installed in a system.", "url": "https://github.com/osquery/osquery/blob/master/specs/atom_packages.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -1389,7 +1389,7 @@ "name": "azure_instance_metadata", "description": "Azure instance metadata.", "url": "https://github.com/osquery/osquery/blob/master/specs/azure_instance_metadata.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -1527,7 +1527,7 @@ "name": "azure_instance_tags", "description": "Azure instance tags.", "url": "https://github.com/osquery/osquery/blob/master/specs/azure_instance_tags.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -2335,7 +2335,7 @@ "name": "carbon_black_info", "description": "Returns info about a Carbon Black sensor install.", "url": "https://github.com/osquery/osquery/blob/master/specs/carbon_black_info.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -2513,7 +2513,7 @@ "name": "carves", "description": "List the set of completed and in-progress carves. If carve=1 then the query is treated as a new carve request.", "url": "https://github.com/osquery/osquery/blob/master/specs/carves.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -2937,7 +2937,7 @@ "name": "chrome_extension_content_scripts", "description": "Chrome browser extension content scripts.", "url": "https://github.com/osquery/osquery/blob/master/specs/chrome_extension_content_scripts.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -3019,7 +3019,7 @@ "name": "chrome_extensions", "description": "Chrome-based browser extensions.", "url": "https://github.com/osquery/osquery/blob/master/specs/chrome_extensions.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -3531,7 +3531,7 @@ "name": "cpuid", "description": "Useful CPU features from the cpuid ASM call.", "url": "https://github.com/osquery/osquery/blob/master/specs/cpuid.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -3909,7 +3909,7 @@ "name": "curl", "description": "Perform an http request and return stats about it.", "url": "https://github.com/osquery/osquery/blob/master/specs/curl.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -3975,7 +3975,7 @@ "name": "curl_certificate", "description": "Inspect TLS certificates by connecting to input hostnames.", "url": "https://github.com/osquery/osquery/blob/master/specs/curl_certificate.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -6831,7 +6831,7 @@ "name": "ec2_instance_metadata", "description": "EC2 instance metadata.", "url": "https://github.com/osquery/osquery/blob/master/specs/ec2_instance_metadata.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -6953,7 +6953,7 @@ "name": "ec2_instance_tags", "description": "EC2 instance tag key value pairs.", "url": "https://github.com/osquery/osquery/blob/master/specs/ec2_instance_tags.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -7559,7 +7559,7 @@ "name": "etc_hosts", "description": "Line-parsed /etc/hosts.", "url": "https://github.com/osquery/osquery/blob/master/specs/etc_hosts.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -7593,7 +7593,7 @@ "name": "etc_protocols", "description": "Line-parsed /etc/protocols.", "url": "https://github.com/osquery/osquery/blob/master/specs/etc_protocols.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -7635,7 +7635,7 @@ "name": "etc_services", "description": "Line-parsed /etc/services.", "url": "https://github.com/osquery/osquery/blob/master/specs/etc_services.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -7735,7 +7735,7 @@ "name": "example", "description": "This is an example table spec.", "url": "https://github.com/osquery/osquery/blob/master/specs/example.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": true, "cacheable": false, "columns": [ @@ -7897,53 +7897,11 @@ } ] }, - { - "name": "fbsd_kmods", - "description": "Loaded FreeBSD kernel modules.", - "url": "https://github.com/osquery/osquery/blob/master/specs/freebsd/fbsd_kmods.table", - "platforms": ["freebsd"], - "evented": false, - "cacheable": false, - "columns": [ - { - "name": "name", - "description": "Module name", - "type": "text", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "size", - "description": "Size of module content", - "type": "integer", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "refs", - "description": "Module reverse dependencies", - "type": "integer", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "address", - "description": "Kernel module address", - "type": "text", - "hidden": false, - "required": false, - "index": false - } - ] - }, { "name": "file", "description": "Interactive filesystem attributes and metadata.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/file.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -8307,7 +8265,7 @@ "name": "firefox_addons", "description": "Firefox browser extensions, webapps, and addons.", "url": "https://github.com/osquery/osquery/blob/master/specs/firefox_addons.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -8521,7 +8479,7 @@ "name": "groups", "description": "Local system groups.", "url": "https://github.com/osquery/osquery/blob/master/specs/groups.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -8693,7 +8651,7 @@ "name": "hash", "description": "Filesystem hash data.", "url": "https://github.com/osquery/osquery/blob/master/specs/hash.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -8943,7 +8901,7 @@ "name": "intel_me_info", "description": "Intel ME/CSE Info.", "url": "https://github.com/osquery/osquery/blob/master/specs/linwin/intel_me_info.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -8961,7 +8919,7 @@ "name": "interface_addresses", "description": "Network interfaces and relevant metadata.", "url": "https://github.com/osquery/osquery/blob/master/specs/interface_addresses.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -9027,7 +8985,7 @@ "name": "interface_details", "description": "Detailed information and stats of network interfaces.", "url": "https://github.com/osquery/osquery/blob/master/specs/interface_details.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -9581,7 +9539,7 @@ "name": "kernel_info", "description": "Basic active kernel information.", "url": "https://github.com/osquery/osquery/blob/master/specs/kernel_info.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -10329,7 +10287,7 @@ "name": "listening_ports", "description": "Processes with listening (bound) network sockets/ports.", "url": "https://github.com/osquery/osquery/blob/master/specs/listening_ports.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -11017,7 +10975,7 @@ "name": "logged_in_users", "description": "Users with an active shell on the system.", "url": "https://github.com/osquery/osquery/blob/master/specs/logged_in_users.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -13681,7 +13639,7 @@ "name": "os_version", "description": "A single row containing the operating system name and version.", "url": "https://github.com/osquery/osquery/blob/master/specs/os_version.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -13795,7 +13753,7 @@ "name": "osquery_events", "description": "Information about the event publishers and subscribers.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_events.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -13861,7 +13819,7 @@ "name": "osquery_extensions", "description": "List of active osquery extensions.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_extensions.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -13919,7 +13877,7 @@ "name": "osquery_flags", "description": "Configurable flags that modify osquery's behavior.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_flags.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -13977,7 +13935,7 @@ "name": "osquery_info", "description": "Top level information about the running version of osquery.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_info.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -14083,7 +14041,7 @@ "name": "osquery_packs", "description": "Information about the current query packs that are loaded in osquery.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_packs.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -14149,7 +14107,7 @@ "name": "osquery_registry", "description": "List the osquery registry plugins.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_registry.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -14199,7 +14157,7 @@ "name": "osquery_schedule", "description": "Information about the current queries that are scheduled in osquery.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/osquery_schedule.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -14835,53 +14793,11 @@ } ] }, - { - "name": "pkg_packages", - "description": "pkgng packages that are currently installed on the host system.", - "url": "https://github.com/osquery/osquery/blob/master/specs/freebsd/pkg_packages.table", - "platforms": ["freebsd"], - "evented": false, - "cacheable": true, - "columns": [ - { - "name": "name", - "description": "Package name", - "type": "text", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "version", - "description": "Package version", - "type": "text", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "flatsize", - "description": "Package size in bytes", - "type": "bigint", - "hidden": false, - "required": false, - "index": false - }, - { - "name": "arch", - "description": "Architecture(s) supported", - "type": "text", - "hidden": false, - "required": false, - "index": false - } - ] - }, { "name": "platform_info", "description": "Information about EFI/UEFI/ROM and platform/boot.", "url": "https://github.com/osquery/osquery/blob/master/specs/platform_info.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -15913,7 +15829,7 @@ "name": "process_memory_map", "description": "Process memory mapped files and pseudo device/regions.", "url": "https://github.com/osquery/osquery/blob/master/specs/process_memory_map.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -16177,7 +16093,7 @@ "name": "process_open_sockets", "description": "Processes which have open network sockets on the system.", "url": "https://github.com/osquery/osquery/blob/master/specs/process_open_sockets.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -16283,7 +16199,7 @@ "name": "processes", "description": "All running processes on the host system.", "url": "https://github.com/osquery/osquery/blob/master/specs/processes.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -16713,7 +16629,7 @@ "name": "python_packages", "description": "Python packages installed in a system.", "url": "https://github.com/osquery/osquery/blob/master/specs/python_packages.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -16951,7 +16867,7 @@ "name": "routes", "description": "The active route table for the host system.", "url": "https://github.com/osquery/osquery/blob/master/specs/routes.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -17649,7 +17565,7 @@ "name": "secureboot", "description": "Secure Boot UEFI Settings.", "url": "https://github.com/osquery/osquery/blob/master/specs/linwin/secureboot.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -19143,7 +19059,7 @@ "name": "ssh_configs", "description": "A table of parsed ssh_configs.", "url": "https://github.com/osquery/osquery/blob/master/specs/ssh_configs.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -19185,7 +19101,7 @@ "name": "startup_items", "description": "Applications and binaries set as user/login startup items.", "url": "https://github.com/osquery/osquery/blob/master/specs/startup_items.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ @@ -19557,7 +19473,7 @@ "name": "system_info", "description": "System information for identification.", "url": "https://github.com/osquery/osquery/blob/master/specs/system_info.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -19875,7 +19791,7 @@ "name": "time", "description": "Track current date and time in the system.", "url": "https://github.com/osquery/osquery/blob/master/specs/utility/time.table", - "platforms": ["darwin", "linux", "freebsd", "windows"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -20213,7 +20129,7 @@ "name": "uptime", "description": "Track time passed since last boot. Some systems track this as calendar time, some as runtime.", "url": "https://github.com/osquery/osquery/blob/master/specs/uptime.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -20467,7 +20383,7 @@ "name": "user_groups", "description": "Local system user group relationships.", "url": "https://github.com/osquery/osquery/blob/master/specs/user_groups.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -20511,7 +20427,7 @@ "name": "user_ssh_keys", "description": "Returns the private keys in the users ~/.ssh directory and whether or not they are encrypted.", "url": "https://github.com/osquery/osquery/blob/master/specs/user_ssh_keys.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -20603,7 +20519,7 @@ "name": "users", "description": "Local user accounts (including domain accounts that have logged on locally (Windows)).", "url": "https://github.com/osquery/osquery/blob/master/specs/users.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": false, "columns": [ @@ -22433,7 +22349,7 @@ "name": "ycloud_instance_metadata", "description": "Yandex.Cloud instance metadata.", "url": "https://github.com/osquery/osquery/blob/master/specs/ycloud_instance_metadata.table", - "platforms": ["darwin", "linux", "windows", "freebsd"], + "platforms": ["darwin", "linux", "windows"], "evented": false, "cacheable": true, "columns": [ diff --git a/frontend/utilities/constants.ts b/frontend/utilities/constants.ts index de6ca5592a..c72177cd76 100644 --- a/frontend/utilities/constants.ts +++ b/frontend/utilities/constants.ts @@ -365,7 +365,6 @@ export const DEFAULT_CAMPAIGN_STATE = { export const PLATFORM_DISPLAY_NAMES: Record = { darwin: "macOS", - freebsd: "FreeBSD", linux: "Linux", windows: "Windows", }; diff --git a/website/views/pages/query-detail.ejs b/website/views/pages/query-detail.ejs index a32644c23e..0c41fc7528 100644 --- a/website/views/pages/query-detail.ejs +++ b/website/views/pages/query-detail.ejs @@ -8,19 +8,19 @@

    {{query.name}}

    -
    {{query.description ? query.description : '--'}}
    +
    {{query.description ? query.description : '--'}}

    {{query.name}}

    -
    {{query.description ? query.description : '--'}}
    -
    +
    {{query.description ? query.description : '--'}}
    +

    Query

    - {{query.query ? query.query : '--'}} + {{query.query ? query.query : '--'}}

    Resolve

    @@ -37,7 +37,6 @@ macOS Windows Linux - FreeBSD
    diff --git a/website/views/pages/query-library.ejs b/website/views/pages/query-library.ejs index 2cb6fd4c16..d4e4bc86e1 100644 --- a/website/views/pages/query-library.ejs +++ b/website/views/pages/query-library.ejs @@ -33,7 +33,6 @@ - @@ -71,8 +70,6 @@ - @@ -132,9 +129,6 @@ -