Support Windows and Ubuntu in osquery-perf (#8616)
This commit is contained in:
Martin Angers
+97
-91
@@ -603,7 +603,7 @@ func (a *agent) CachedString(key string) string {
|
||||
return val
|
||||
}
|
||||
|
||||
func (a *agent) hostUsersMacOS() []map[string]string {
|
||||
func (a *agent) hostUsers() []map[string]string {
|
||||
groupNames := []string{"staff", "nobody", "wheel", "tty", "daemon"}
|
||||
shells := []string{"/bin/zsh", "/bin/sh", "/usr/bin/false", "/bin/bash"}
|
||||
commonUsers := make([]map[string]string, a.userCount.common)
|
||||
@@ -717,26 +717,6 @@ func (a *agent) softwareWindows11() []map[string]string {
|
||||
return loadSoftware("windows", "11")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu1604() []map[string]string {
|
||||
return loadSoftware("ubuntu", "1604")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu1804() []map[string]string {
|
||||
return loadSoftware("ubuntu", "1804")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu2004() []map[string]string {
|
||||
return loadSoftware("ubuntu", "2004")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu2104() []map[string]string {
|
||||
return loadSoftware("ubuntu", "2104")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu2110() []map[string]string {
|
||||
return loadSoftware("ubuntu", "2110")
|
||||
}
|
||||
|
||||
func (a *agent) softwareUbuntu2204() []map[string]string {
|
||||
return loadSoftware("ubuntu", "2204")
|
||||
}
|
||||
@@ -862,22 +842,22 @@ func (a *agent) randomQueryStats() []map[string]string {
|
||||
return stats
|
||||
}
|
||||
|
||||
func (a *agent) mdm() []map[string]string {
|
||||
possibleURLs := []string{
|
||||
"https://kandji.com/1",
|
||||
"https://jamf.com/1",
|
||||
"https://airwatch.com/1",
|
||||
"https://microsoft.com/1",
|
||||
"https://simplemdm.com/1",
|
||||
"https://example.com/1",
|
||||
"https://kandji.com/2",
|
||||
"https://jamf.com/2",
|
||||
"https://airwatch.com/2",
|
||||
"https://microsoft.com/2",
|
||||
"https://simplemdm.com/2",
|
||||
"https://example.com/2",
|
||||
}
|
||||
var possibleMDMServerURLs = []string{
|
||||
"https://kandji.com/1",
|
||||
"https://jamf.com/1",
|
||||
"https://airwatch.com/1",
|
||||
"https://microsoft.com/1",
|
||||
"https://simplemdm.com/1",
|
||||
"https://example.com/1",
|
||||
"https://kandji.com/2",
|
||||
"https://jamf.com/2",
|
||||
"https://airwatch.com/2",
|
||||
"https://microsoft.com/2",
|
||||
"https://simplemdm.com/2",
|
||||
"https://example.com/2",
|
||||
}
|
||||
|
||||
func (a *agent) mdmMac() []map[string]string {
|
||||
enrolled := "true"
|
||||
if rand.Intn(2) == 1 {
|
||||
enrolled = "false"
|
||||
@@ -886,12 +866,35 @@ func (a *agent) mdm() []map[string]string {
|
||||
if rand.Intn(2) == 1 {
|
||||
installedFromDep = "false"
|
||||
}
|
||||
ix := rand.Intn(len(possibleURLs))
|
||||
ix := rand.Intn(len(possibleMDMServerURLs))
|
||||
return []map[string]string{
|
||||
{"enrolled": enrolled, "server_url": possibleURLs[ix], "installed_from_dep": installedFromDep},
|
||||
{"enrolled": enrolled, "server_url": possibleMDMServerURLs[ix], "installed_from_dep": installedFromDep},
|
||||
}
|
||||
}
|
||||
|
||||
func (a *agent) mdmWindows() []map[string]string {
|
||||
autopilot := rand.Intn(2) == 1
|
||||
ix := rand.Intn(len(possibleMDMServerURLs))
|
||||
serverURL := possibleMDMServerURLs[ix]
|
||||
providerID := fleet.MDMNameFromServerURL(serverURL)
|
||||
installType := "Microsoft Workstation"
|
||||
if rand.Intn(4) == 1 {
|
||||
installType = "Microsoft Server"
|
||||
}
|
||||
|
||||
rows := []map[string]string{
|
||||
{"key": "discovery_service_url", "value": serverURL},
|
||||
{"key": "installation_type", "value": installType},
|
||||
}
|
||||
if providerID != "" {
|
||||
rows = append(rows, map[string]string{"key": "provider_id", "value": providerID})
|
||||
}
|
||||
if autopilot {
|
||||
rows = append(rows, map[string]string{"key": "autopilot", "value": "true"})
|
||||
}
|
||||
return rows
|
||||
}
|
||||
|
||||
var munkiIssues = func() []string {
|
||||
// generate a list of random munki issues (messages)
|
||||
issues := make([]string, 1000)
|
||||
@@ -1004,7 +1007,13 @@ func (a *agent) processQuery(name, query string) (handled bool, results []map[st
|
||||
case name == hostDetailQueryPrefix+"mdm":
|
||||
ss := fleet.OsqueryStatus(rand.Intn(2))
|
||||
if ss == fleet.StatusOK {
|
||||
results = a.mdm()
|
||||
results = a.mdmMac()
|
||||
}
|
||||
return true, results, &ss
|
||||
case name == hostDetailQueryPrefix+"mdm_windows":
|
||||
ss := fleet.OsqueryStatus(rand.Intn(2))
|
||||
if ss == fleet.StatusOK {
|
||||
results = a.mdmWindows()
|
||||
}
|
||||
return true, results, &ss
|
||||
case name == hostDetailQueryPrefix+"munki_info":
|
||||
@@ -1028,7 +1037,7 @@ func (a *agent) processQuery(name, query string) (handled bool, results []map[st
|
||||
case name == hostDetailQueryPrefix+"users":
|
||||
ss := fleet.OsqueryStatus(rand.Intn(2))
|
||||
if ss == fleet.StatusOK {
|
||||
results = a.hostUsersMacOS()
|
||||
results = a.hostUsers()
|
||||
}
|
||||
return true, results, &ss
|
||||
case name == hostDetailQueryPrefix+"software_macos":
|
||||
@@ -1047,16 +1056,6 @@ func (a *agent) processQuery(name, query string) (handled bool, results []map[st
|
||||
ss := fleet.OsqueryStatus(rand.Intn(2))
|
||||
if ss == fleet.StatusOK {
|
||||
switch a.os {
|
||||
case "ubuntu_16.04":
|
||||
results = a.softwareUbuntu1604()
|
||||
case "ubuntu_18.04":
|
||||
results = a.softwareUbuntu1804()
|
||||
case "ubuntu_20.04":
|
||||
results = a.softwareUbuntu2004()
|
||||
case "ubuntu_21.04":
|
||||
results = a.softwareUbuntu2104()
|
||||
case "ubuntu_21.10":
|
||||
results = a.softwareUbuntu2110()
|
||||
case "ubuntu_22.04":
|
||||
results = a.softwareUbuntu2204()
|
||||
}
|
||||
@@ -1144,50 +1143,60 @@ func (a *agent) DistributedWrite(queries map[string]string) {
|
||||
}
|
||||
|
||||
func main() {
|
||||
serverURL := flag.String("server_url", "https://localhost:8080", "URL (with protocol and port of osquery server)")
|
||||
enrollSecret := flag.String("enroll_secret", "", "Enroll secret to authenticate enrollment")
|
||||
hostCount := flag.Int("host_count", 10, "Number of hosts to start (default 10)")
|
||||
randSeed := flag.Int64("seed", time.Now().UnixNano(), "Seed for random generator (default current time)")
|
||||
startPeriod := flag.Duration("start_period", 10*time.Second, "Duration to spread start of hosts over")
|
||||
configInterval := flag.Duration("config_interval", 1*time.Minute, "Interval for config requests")
|
||||
queryInterval := flag.Duration("query_interval", 10*time.Second, "Interval for live query requests")
|
||||
onlyAlreadyEnrolled := flag.Bool("only_already_enrolled", false, "Only start agents that are already enrolled")
|
||||
nodeKeyFile := flag.String("node_key_file", "", "File with node keys to use")
|
||||
commonSoftwareCount := flag.Int("common_software_count", 10, "Number of common installed applications reported to fleet")
|
||||
uniqueSoftwareCount := flag.Int("unique_software_count", 10, "Number of unique installed applications reported to fleet")
|
||||
vulnerableSoftwareCount := flag.Int("vulnerable_software_count", 10, "Number of vulnerable installed applications reported to fleet")
|
||||
withLastOpenedSoftwareCount := flag.Int("with_last_opened_software_count", 10, "Number of applications that may report a last opened timestamp to fleet")
|
||||
lastOpenedChangeProb := flag.Float64("last_opened_change_prob", 0.1, "Probability of last opened timestamp to be reported as changed [0, 1]")
|
||||
commonUserCount := flag.Int("common_user_count", 10, "Number of common host users reported to fleet")
|
||||
uniqueUserCount := flag.Int("unique_user_count", 10, "Number of unique host users reported to fleet")
|
||||
policyPassProb := flag.Float64("policy_pass_prob", 1.0, "Probability of policies to pass [0, 1]")
|
||||
orbitProb := flag.Float64("orbit_prob", 0.5, "Probability of a host being identified as orbit install [0, 1]")
|
||||
munkiIssueProb := flag.Float64("munki_issue_prob", 0.5, "Probability of a host having munki issues (note that ~50% of hosts have munki installed) [0, 1]")
|
||||
munkiIssueCount := flag.Int("munki_issue_count", 10, "Number of munki issues reported by hosts identified to have munki issues")
|
||||
validTemplateNames := map[string]bool{
|
||||
"mac10.14.6.tmpl": true,
|
||||
"windows_11.tmpl": true,
|
||||
"ubuntu_22.04.tmpl": true,
|
||||
}
|
||||
allowedTemplateNames := make([]string, 0, len(validTemplateNames))
|
||||
for k := range validTemplateNames {
|
||||
allowedTemplateNames = append(allowedTemplateNames, k)
|
||||
}
|
||||
|
||||
var (
|
||||
serverURL = flag.String("server_url", "https://localhost:8080", "URL (with protocol and port of osquery server)")
|
||||
enrollSecret = flag.String("enroll_secret", "", "Enroll secret to authenticate enrollment")
|
||||
hostCount = flag.Int("host_count", 10, "Number of hosts to start (default 10)")
|
||||
randSeed = flag.Int64("seed", time.Now().UnixNano(), "Seed for random generator (default current time)")
|
||||
startPeriod = flag.Duration("start_period", 10*time.Second, "Duration to spread start of hosts over")
|
||||
configInterval = flag.Duration("config_interval", 1*time.Minute, "Interval for config requests")
|
||||
queryInterval = flag.Duration("query_interval", 10*time.Second, "Interval for live query requests")
|
||||
onlyAlreadyEnrolled = flag.Bool("only_already_enrolled", false, "Only start agents that are already enrolled")
|
||||
nodeKeyFile = flag.String("node_key_file", "", "File with node keys to use")
|
||||
commonSoftwareCount = flag.Int("common_software_count", 10, "Number of common installed applications reported to fleet")
|
||||
uniqueSoftwareCount = flag.Int("unique_software_count", 10, "Number of unique installed applications reported to fleet")
|
||||
vulnerableSoftwareCount = flag.Int("vulnerable_software_count", 10, "Number of vulnerable installed applications reported to fleet")
|
||||
withLastOpenedSoftwareCount = flag.Int("with_last_opened_software_count", 10, "Number of applications that may report a last opened timestamp to fleet")
|
||||
lastOpenedChangeProb = flag.Float64("last_opened_change_prob", 0.1, "Probability of last opened timestamp to be reported as changed [0, 1]")
|
||||
commonUserCount = flag.Int("common_user_count", 10, "Number of common host users reported to fleet")
|
||||
uniqueUserCount = flag.Int("unique_user_count", 10, "Number of unique host users reported to fleet")
|
||||
policyPassProb = flag.Float64("policy_pass_prob", 1.0, "Probability of policies to pass [0, 1]")
|
||||
orbitProb = flag.Float64("orbit_prob", 0.5, "Probability of a host being identified as orbit install [0, 1]")
|
||||
munkiIssueProb = flag.Float64("munki_issue_prob", 0.5, "Probability of a host having munki issues (note that ~50% of hosts have munki installed) [0, 1]")
|
||||
munkiIssueCount = flag.Int("munki_issue_count", 10, "Number of munki issues reported by hosts identified to have munki issues")
|
||||
osTemplates = flag.String("os_templates", "mac10.14.6", fmt.Sprintf("Comma separated list of host OS templates to use (any of %v, with or without the .tmpl extension)", allowedTemplateNames))
|
||||
)
|
||||
|
||||
flag.Parse()
|
||||
|
||||
rand.Seed(*randSeed)
|
||||
|
||||
templateNames := []string{
|
||||
"mac10.14.6.tmpl",
|
||||
|
||||
// Uncomment this to add windows hosts
|
||||
// "windows_11.tmpl",
|
||||
|
||||
// Uncomment this to add ubuntu hosts with vulnerable software
|
||||
// "partial_ubuntu.tmpl",
|
||||
// "ubuntu_16.04.tmpl",
|
||||
// "ubuntu_18.04.tmpl",
|
||||
// "ubuntu_20.04.tmpl",
|
||||
// "ubuntu_21.04.tmpl",
|
||||
// "ubuntu_21.10.tmpl",
|
||||
// "ubuntu_22.04.tmpl",
|
||||
if *onlyAlreadyEnrolled {
|
||||
// Orbit enrollment does not support the "already enrolled" mode at the
|
||||
// moment (see TODO in this file).
|
||||
*orbitProb = 0
|
||||
}
|
||||
|
||||
var tmpls []*template.Template
|
||||
for _, t := range templateNames {
|
||||
tmpl, err := template.ParseFS(templatesFS, t)
|
||||
requestedTemplates := strings.Split(*osTemplates, ",")
|
||||
for _, nm := range requestedTemplates {
|
||||
if !strings.HasSuffix(nm, ".tmpl") {
|
||||
nm += ".tmpl"
|
||||
}
|
||||
if !validTemplateNames[nm] {
|
||||
log.Fatalf("Invalid template name: %s (accepted values: %v)", nm, allowedTemplateNames)
|
||||
}
|
||||
|
||||
tmpl, err := template.ParseFS(templatesFS, nm)
|
||||
if err != nil {
|
||||
log.Fatal("parse templates: ", err)
|
||||
}
|
||||
@@ -1208,9 +1217,6 @@ func main() {
|
||||
|
||||
for i := 0; i < *hostCount; i++ {
|
||||
tmpl := tmpls[i%len(tmpls)]
|
||||
if strings.HasPrefix(tmpl.Name(), "partial") {
|
||||
continue
|
||||
}
|
||||
a := newAgent(i+1, *serverURL, *enrollSecret, tmpl, *configInterval, *queryInterval,
|
||||
softwareEntityCount{
|
||||
entityCount: entityCount{
|
||||
@@ -1231,7 +1237,7 @@ func main() {
|
||||
)
|
||||
a.stats = stats
|
||||
a.nodeKeyManager = nodeKeyManager
|
||||
go a.runLoop(i, onlyAlreadyEnrolled != nil && *onlyAlreadyEnrolled)
|
||||
go a.runLoop(i, *onlyAlreadyEnrolled)
|
||||
time.Sleep(sleepTime)
|
||||
}
|
||||
|
||||
|
||||
@@ -38,7 +38,7 @@
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
@@ -58,147 +58,11 @@
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_network_interface" -}}
|
||||
{{ define "fleet_detail_query_network_interface_unix" -}}
|
||||
[
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::8cb:112d:ff51:1e5d%en0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"en0",
|
||||
"mac":"f8:2d:88:93:56:5c",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"192.168.1.3",
|
||||
"mask":"255.255.255.0",
|
||||
"broadcast":"192.168.1.255",
|
||||
"interface":"en0",
|
||||
"mac":"f5:5a:80:92:52:5b",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"127.0.0.1",
|
||||
"address":"127.0.0.1",
|
||||
"mask":"255.0.0.0",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"::1",
|
||||
"address":"::1",
|
||||
"mask":"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::1%lo0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::3a:84ff:fe6b:bf75%awdl0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"awdl0",
|
||||
"mac":"03:3b:94:5b:be:75",
|
||||
"type":"6",
|
||||
"mtu":"1484",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"16",
|
||||
"ibytes":"0",
|
||||
"obytes":"3072",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582842892"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::6eaf:9721:3476:b691%utun0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"utun0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"1",
|
||||
"mtu":"2000",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"2",
|
||||
"ibytes":"0",
|
||||
"obytes":"0",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840897"
|
||||
"mac":"f8:2d:88:93:56:5c"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
@@ -228,8 +92,6 @@
|
||||
"patch":"6",
|
||||
"build":"18G3020",
|
||||
"platform":"darwin",
|
||||
"platform_like":"darwin",
|
||||
"codename":"",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"18.7.0"
|
||||
}
|
||||
|
||||
@@ -1,238 +0,0 @@
|
||||
{{ define "fleet_detail_query_network_interface" -}}
|
||||
[
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::8cb:112d:ff51:1e5d%en0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"en0",
|
||||
"mac":"f8:2d:88:93:56:5c",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"192.168.1.3",
|
||||
"mask":"255.255.255.0",
|
||||
"broadcast":"192.168.1.255",
|
||||
"interface":"en0",
|
||||
"mac":"f5:5a:80:92:52:5b",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"127.0.0.1",
|
||||
"address":"127.0.0.1",
|
||||
"mask":"255.0.0.0",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"::1",
|
||||
"address":"::1",
|
||||
"mask":"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::1%lo0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::3a:84ff:fe6b:bf75%awdl0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"awdl0",
|
||||
"mac":"03:3b:94:5b:be:75",
|
||||
"type":"6",
|
||||
"mtu":"1484",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"16",
|
||||
"ibytes":"0",
|
||||
"obytes":"3072",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582842892"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::6eaf:9721:3476:b691%utun0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"utun0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"1",
|
||||
"mtu":"2000",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"2",
|
||||
"ibytes":"0",
|
||||
"obytes":"0",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840897"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_flags" -}}
|
||||
[
|
||||
{
|
||||
"name":"config_refresh",
|
||||
"value":"{{ printf "%.0f" .ConfigInterval.Seconds }}"
|
||||
},
|
||||
{
|
||||
"name":"distributed_interval",
|
||||
"value":"{{ printf "%.0f" .QueryInterval.Seconds }}"
|
||||
},
|
||||
{
|
||||
"name":"logger_tls_period",
|
||||
"value":"99999"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_system_info" -}}
|
||||
[
|
||||
{
|
||||
"hostname":"{{ .CachedString "hostname" }}",
|
||||
"uuid":"4740D59F-699E-5B29-960B-979AAF9BBEEB",
|
||||
"cpu_type":"x86_64h",
|
||||
"cpu_subtype":"Intel x86-64h Haswell",
|
||||
"cpu_brand":"Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz",
|
||||
"cpu_physical_cores":"4",
|
||||
"cpu_logical_cores":"8",
|
||||
"cpu_microcode":"",
|
||||
"physical_memory":"17179869184",
|
||||
"hardware_vendor":"Apple Inc.",
|
||||
"hardware_model":"MacBookPro11,4",
|
||||
"hardware_version":"1.0",
|
||||
"hardware_serial":"C02R262BM8LN",
|
||||
"computer_name":"{{ .CachedString "hostname" }}",
|
||||
"local_hostname":"{{ .CachedString "hostname" }}"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_uptime" -}}
|
||||
[
|
||||
{
|
||||
"days":"0",
|
||||
"hours":"4",
|
||||
"minutes":"38",
|
||||
"seconds":"11",
|
||||
"total_seconds":"16691"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* all hosts */}}
|
||||
{{ define "fleet_label_query_6" -}}
|
||||
[
|
||||
{
|
||||
"1": "1"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* All macOS hosts */}}
|
||||
{{ define "fleet_label_query_7" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Ubuntu hosts */}}
|
||||
{{ define "fleet_label_query_8" -}}
|
||||
[
|
||||
{
|
||||
"1": "1"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* All CentOS hosts */}}
|
||||
{{ define "fleet_label_query_9" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Windows hosts */}}
|
||||
{{ define "fleet_label_query_10" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Red Hat hosts */}}
|
||||
{{ define "fleet_label_query_11" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Linux distributions */}}
|
||||
{{ define "fleet_label_query_12" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
@@ -1,128 +0,0 @@
|
||||
{{ define "enroll" -}}
|
||||
{
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "Ubuntu 16.4.0",
|
||||
"patch": "",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 16.4.0"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "16.04",
|
||||
"build_platform": "linux",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
"extensions": "inactive",
|
||||
"instance_id": "{{ .UUID }}",
|
||||
"pid": "12947",
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"16.04.7 LTS (Xenial Xerus)",
|
||||
"major":"16",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"18G3020",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"xenial",
|
||||
"arch":"x86_64"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"16.04.7 LTS (Xenial Xerus)",
|
||||
"major":"16",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"18G3020",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"xenial",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"5.10.76-linuxkit"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"ubuntu",
|
||||
"build_distro":"16.4.0",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
|
||||
|
||||
{{template "fleet_detail_query_network_interface" .}}
|
||||
{{template "fleet_detail_query_osquery_flags" .}}
|
||||
{{template "fleet_detail_query_system_info" .}}
|
||||
{{template "fleet_detail_query_uptime" .}}
|
||||
{{template "fleet_detail_query_users" .}}
|
||||
{{template "fleet_label_query_6" .}}
|
||||
{{template "fleet_label_query_8" .}}
|
||||
{{template "fleet_label_query_9" .}}
|
||||
{{template "fleet_label_query_10" .}}
|
||||
{{template "fleet_label_query_11" .}}
|
||||
{{template "fleet_label_query_12" .}}
|
||||
@@ -1,116 +0,0 @@
|
||||
{{ define "enroll" -}}
|
||||
{
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "",
|
||||
"patch": "",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 18.4.0"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "18.04",
|
||||
"build_platform": "linux",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
"extensions": "inactive",
|
||||
"instance_id": "{{ .UUID }}",
|
||||
"pid": "12947",
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"18.04.5 LTS (Bionic Beaver)",
|
||||
"major":"18",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"bionic",
|
||||
"arch":"x86_64"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"18.04.5 LTS (Bionic Beaver)",
|
||||
"major":"18",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"bionic",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"5.10.76-linuxkit"
|
||||
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"ubuntu",
|
||||
"build_distro":"Ubuntu 18.4.0",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
|
||||
@@ -1,114 +0,0 @@
|
||||
{{ define "enroll" -}}
|
||||
{
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "",
|
||||
"patch": "",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 20.4.0"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "20.4.0",
|
||||
"build_platform": "linux",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
"extensions": "inactive",
|
||||
"instance_id": "{{ .UUID }}",
|
||||
"pid": "12947",
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"20.04.2 LTS (Focal Fossa)",
|
||||
"major":"20",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"focal",
|
||||
"arch":"x86_64"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"20.04.2 LTS (Focal Fossa)",
|
||||
"major":"20",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"focal",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"5.10.76-linuxkit"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"ubuntu",
|
||||
"build_distro":"20.4.0",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
@@ -1,112 +0,0 @@
|
||||
{{ define "enroll" -}}
|
||||
{
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "",
|
||||
"patch": "",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 21.4.0"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "21.4.0",
|
||||
"build_platform": "linux",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
"extensions": "inactive",
|
||||
"instance_id": "{{ .UUID }}",
|
||||
"pid": "12947",
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"21.4.0",
|
||||
"major":"",
|
||||
"minor":"",
|
||||
"patch":"",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"ubuntu",
|
||||
"codename":""
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"21.4.0",
|
||||
"major":"",
|
||||
"minor":"",
|
||||
"patch":"",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"ubuntu",
|
||||
"codename":"",
|
||||
"kernel_version":""
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"ubuntu",
|
||||
"build_distro":"10.12",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
@@ -1,115 +0,0 @@
|
||||
{{ define "enroll" -}}
|
||||
{
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "Ubuntu 21.10.0",
|
||||
"patch": "",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 21.10.0"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "21.10.0",
|
||||
"build_platform": "ubuntu",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
"extensions": "inactive",
|
||||
"instance_id": "{{ .UUID }}",
|
||||
"pid": "12947",
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"21.10.0 (Impish Indri)",
|
||||
"major":"21",
|
||||
"minor":"10",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"impish",
|
||||
"arch":"x86_64"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"21.10.0 (Impish Indri)",
|
||||
"major":"21",
|
||||
"minor":"10",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"impish",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"5.10.76-linuxkit"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"ubuntu",
|
||||
"build_distro":"21.10.0",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
@@ -3,17 +3,19 @@
|
||||
"enroll_secret": "{{ .EnrollSecret }}",
|
||||
"host_details": {
|
||||
"os_version": {
|
||||
"arch": "x86_64",
|
||||
"build": "",
|
||||
"major": "",
|
||||
"minor": "",
|
||||
"name": "Ubuntu 22.4.0",
|
||||
"patch": "",
|
||||
"codename": "jammy",
|
||||
"major": "22",
|
||||
"minor": "4",
|
||||
"name": "Ubuntu",
|
||||
"patch": "0",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "ubuntu",
|
||||
"version": "Ubuntu 22.4.0"
|
||||
"platform_like": "debian",
|
||||
"version": "22.04.1 LTS (Jammy Jellyfish)"
|
||||
},
|
||||
"osquery_info": {
|
||||
"build_distro": "22.4.0",
|
||||
"build_distro": "centos7",
|
||||
"build_platform": "linux",
|
||||
"config_hash": "",
|
||||
"config_valid": "0",
|
||||
@@ -23,58 +25,57 @@
|
||||
"platform_mask": "21",
|
||||
"start_time": "1580931224",
|
||||
"uuid": "{{ .UUID }}",
|
||||
"version": "4.6.0",
|
||||
"watcher": "12946"
|
||||
"version": "5.5.1",
|
||||
"watcher": "-1"
|
||||
},
|
||||
"platform_info": {
|
||||
"address": "0xff990000",
|
||||
"date": "12/16/2019 ",
|
||||
"extra": "MBP114; 196.0.0.0.0; root@xapp160; Mon Dec 16 15:55:18 PST 2019; 196 (B&I); F000_B00; Official Build, Release; Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn)",
|
||||
"revision": "196 (B&I)",
|
||||
"size": "8388608",
|
||||
"vendor": "Apple Inc. ",
|
||||
"version": "196.0.0.0.0 ",
|
||||
"volume_size": "1507328"
|
||||
},
|
||||
"system_info": {
|
||||
"computer_name": "{{ .CachedString "hostname" }}",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
|
||||
"cpu_brand": "Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz",
|
||||
"cpu_logical_cores": "8",
|
||||
"cpu_physical_cores": "4",
|
||||
"cpu_subtype": "Intel x86-64h Haswell",
|
||||
"cpu_type": "x86_64h",
|
||||
"hardware_model": "MacBookPro11,4",
|
||||
"hardware_serial": "D02R835DG8WK",
|
||||
"hardware_vendor": "Apple Inc.",
|
||||
"hardware_version": "1.0",
|
||||
"hardware_model": "",
|
||||
"hardware_serial": "",
|
||||
"hardware_vendor": "",
|
||||
"hardware_version": "",
|
||||
"hostname": "{{ .CachedString "hostname" }}",
|
||||
"local_hostname": "{{ .CachedString "hostname" }}",
|
||||
"physical_memory": "17179869184",
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"host_identifier": "{{ .UUID }}",
|
||||
"platform_type": "16"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
{{ define "fleet_detail_query_network_interface_unix" -}}
|
||||
[
|
||||
{
|
||||
"name":"Ubuntu",
|
||||
"version":"22.04.1 LTS (Jammy Jellyfish)",
|
||||
"major":"22",
|
||||
"minor":"4",
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"jammy",
|
||||
"arch":"x86_64"
|
||||
"address":"fe80::8cb:112d:ff51:1e5d%en0",
|
||||
"mac":"f8:2d:88:93:56:5c"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"arch": "x86_64",
|
||||
"build": "",
|
||||
"codename": "jammy",
|
||||
"major": "22",
|
||||
"minor": "4",
|
||||
"name": "Ubuntu",
|
||||
"patch": "0",
|
||||
"platform": "ubuntu",
|
||||
"platform_like": "debian",
|
||||
"version": "22.04.1 LTS (Jammy Jellyfish)"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_os_unix_like" -}}
|
||||
[
|
||||
{
|
||||
@@ -85,30 +86,121 @@
|
||||
"patch":"0",
|
||||
"build":"",
|
||||
"platform":"ubuntu",
|
||||
"platform_like":"debian",
|
||||
"codename":"jammy",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"5.10.76-linuxkit"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_osquery_flags" -}}
|
||||
[
|
||||
{
|
||||
"name":"config_refresh",
|
||||
"value":"{{ printf "%.0f" .ConfigInterval.Seconds }}"
|
||||
},
|
||||
{
|
||||
"name":"distributed_interval",
|
||||
"value":"{{ printf "%.0f" .QueryInterval.Seconds }}"
|
||||
},
|
||||
{
|
||||
"name":"logger_tls_period",
|
||||
"value":"99999"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
"pid":"11287",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}",
|
||||
"version":"4.1.2",
|
||||
"version":"5.5.1",
|
||||
"config_hash":"b01efbf375ac6767f259ae98751154fef727ce35",
|
||||
"config_valid":"1",
|
||||
"extensions":"inactive",
|
||||
"build_platform":"linux",
|
||||
"build_distro":"22.4.0",
|
||||
"build_distro":"centos7",
|
||||
"start_time":"1582857555",
|
||||
"watcher":"11286",
|
||||
"platform_mask":"21"
|
||||
"watcher":"-1",
|
||||
"platform_mask":"9"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_system_info" -}}
|
||||
[
|
||||
{
|
||||
"hostname":"{{ .CachedString "hostname" }}",
|
||||
"uuid":"4740D59F-699E-5B29-960B-979AAF9BBEEB",
|
||||
"cpu_type":"x86_64h",
|
||||
"cpu_subtype":"Intel x86-64h Haswell",
|
||||
"cpu_brand":"Intel(R) Core(TM) i7-4770HQ CPU @ 2.20GHz",
|
||||
"cpu_physical_cores":"4",
|
||||
"cpu_logical_cores":"8",
|
||||
"cpu_microcode":"",
|
||||
"physical_memory":"17179869184",
|
||||
"hardware_vendor":"",
|
||||
"hardware_model":"",
|
||||
"hardware_version":"",
|
||||
"hardware_serial":"",
|
||||
"computer_name":"{{ .CachedString "hostname" }}",
|
||||
"local_hostname":"{{ .CachedString "hostname" }}"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_uptime" -}}
|
||||
[
|
||||
{
|
||||
"days":"0",
|
||||
"hours":"4",
|
||||
"minutes":"38",
|
||||
"seconds":"11",
|
||||
"total_seconds":"16691"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* all hosts */}}
|
||||
{{ define "fleet_label_query_6" -}}
|
||||
[
|
||||
{
|
||||
"1": "1"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* All macOS hosts */}}
|
||||
{{ define "fleet_label_query_7" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Ubuntu hosts */}}
|
||||
{{ define "fleet_label_query_8" -}}
|
||||
[
|
||||
{
|
||||
"1": "1"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* All CentOS hosts */}}
|
||||
{{ define "fleet_label_query_9" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Windows hosts */}}
|
||||
{{ define "fleet_label_query_10" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Red Hat hosts */}}
|
||||
{{ define "fleet_label_query_11" -}}
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Linux distributions */}}
|
||||
{{ define "fleet_label_query_12" -}}
|
||||
[
|
||||
{
|
||||
"1": "1"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
@@ -6,7 +6,7 @@
|
||||
"build":"22000",
|
||||
"major":"10",
|
||||
"minor":"0",
|
||||
"name":"Microsoft Windows 11 Pro",
|
||||
"name":"Microsoft Windows 11 Enterprise",
|
||||
"patch":"",
|
||||
"platform":"windows",
|
||||
"platform_like":"windows",
|
||||
@@ -53,167 +53,54 @@
|
||||
"uuid": "{{ .UUID }}"
|
||||
}
|
||||
},
|
||||
"host_identifier": "{{ .CachedString "hostname" }}",
|
||||
"host_identifier": "{{ .UUID }}",
|
||||
"platform_type": "2"
|
||||
}
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_network_interface" -}}
|
||||
{{ define "fleet_detail_query_network_interface_windows" -}}
|
||||
[
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::8cb:112d:ff51:1e5d%en0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"en0",
|
||||
"mac":"f8:2d:88:93:56:5c",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"192.168.1.3",
|
||||
"mask":"255.255.255.0",
|
||||
"broadcast":"192.168.1.255",
|
||||
"interface":"en0",
|
||||
"mac":"f5:5a:80:92:52:5b",
|
||||
"type":"6",
|
||||
"mtu":"1500",
|
||||
"metric":"0",
|
||||
"ipackets":"278493",
|
||||
"opackets":"206238",
|
||||
"ibytes":"275799040",
|
||||
"obytes":"37720064",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582848084"
|
||||
},
|
||||
{
|
||||
"point_to_point":"127.0.0.1",
|
||||
"address":"127.0.0.1",
|
||||
"mask":"255.0.0.0",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"::1",
|
||||
"address":"::1",
|
||||
"mask":"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::1%lo0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"lo0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"24",
|
||||
"mtu":"16384",
|
||||
"metric":"0",
|
||||
"ipackets":"132952",
|
||||
"opackets":"132952",
|
||||
"ibytes":"67053568",
|
||||
"obytes":"67053568",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840871"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::3a:84ff:fe6b:bf75%awdl0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"awdl0",
|
||||
"mac":"03:3b:94:5b:be:75",
|
||||
"type":"6",
|
||||
"mtu":"1484",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"16",
|
||||
"ibytes":"0",
|
||||
"obytes":"3072",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582842892"
|
||||
},
|
||||
{
|
||||
"point_to_point":"",
|
||||
"address":"fe80::6eaf:9721:3476:b691%utun0",
|
||||
"mask":"ffff:ffff:ffff:ffff::",
|
||||
"broadcast":"",
|
||||
"interface":"utun0",
|
||||
"mac":"00:00:00:00:00:00",
|
||||
"type":"1",
|
||||
"mtu":"2000",
|
||||
"metric":"0",
|
||||
"ipackets":"0",
|
||||
"opackets":"2",
|
||||
"ibytes":"0",
|
||||
"obytes":"0",
|
||||
"ierrors":"0",
|
||||
"oerrors":"0",
|
||||
"idrops":"0",
|
||||
"odrops":"0",
|
||||
"last_change":"1582840897"
|
||||
"mac":"f8:2d:88:93:56:5c"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_os_version" -}}
|
||||
[
|
||||
{
|
||||
"name":"Microsoft Windows 11 Pro",
|
||||
"name":"Microsoft Windows 11 Enterprise",
|
||||
"version":"10.0.22000",
|
||||
"build":"22000",
|
||||
"major":"10",
|
||||
"minor":"0",
|
||||
"patch":"",
|
||||
"build":"22000",
|
||||
"platform":"windows",
|
||||
"platform_like":"windows",
|
||||
"codename":""
|
||||
"codename":"Microsoft Windows 11 Enterprise",
|
||||
"arch":"x86_64",
|
||||
"install_date":"1667847179"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_os_version_windows" -}}
|
||||
[
|
||||
{
|
||||
"name":"Microsoft Windows 11 Enterprise",
|
||||
"display_version":"21H2",
|
||||
"release_id":"2009"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
{{ define "fleet_detail_query_os_windows" -}}
|
||||
[
|
||||
{
|
||||
"name":"Microsoft Windows 11 Enterprise",
|
||||
"platform":"windows",
|
||||
"arch":"x86_64",
|
||||
"kernel_version":"10.0.22000.1098",
|
||||
"display_version":"21H2",
|
||||
"release_id":"2009"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
@@ -236,7 +123,6 @@
|
||||
{{ define "fleet_detail_query_osquery_info" -}}
|
||||
[
|
||||
{
|
||||
|
||||
"build_distro": "10",
|
||||
"build_platform": "windows",
|
||||
"config_hash": "09d7386d20179cb1b725ed88f38c98e3b2e72c90",
|
||||
@@ -246,8 +132,7 @@
|
||||
"pid": "9072",
|
||||
"platform_mask": "2",
|
||||
"start_time": "1660223255",
|
||||
"uuid": "AF028C41-1AAD-4025-7391-A93C26B9A17A",
|
||||
"version": "5.4.0",
|
||||
"version": "5.5.1",
|
||||
"watcher": "-1",
|
||||
"uuid":"{{ .UUID }}",
|
||||
"instance_id":"{{ .UUID }}"
|
||||
@@ -286,21 +171,6 @@
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{ define "fleet_detail_query_users" -}}
|
||||
[
|
||||
{{ range $index, $item := .HostUsersMacOS }}
|
||||
{{if $index}},{{end}}
|
||||
{
|
||||
"uid": "{{ .Uid }}",
|
||||
"username": "{{ .Username }}",
|
||||
"type": "{{ .Type }}",
|
||||
"groupname": "{{ .GroupName }}",
|
||||
"shell": "{{ .Shell }}"
|
||||
}
|
||||
{{- end }}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
{{/* all hosts */}}
|
||||
{{ define "fleet_label_query_6" -}}
|
||||
[
|
||||
@@ -312,9 +182,7 @@
|
||||
|
||||
{{/* All macOS hosts */}}
|
||||
{{ define "fleet_label_query_7" -}}
|
||||
[
|
||||
|
||||
]
|
||||
[]
|
||||
{{- end }}
|
||||
|
||||
{{/* All Ubuntu hosts */}}
|
||||
@@ -349,690 +217,200 @@
|
||||
{{ define "fleet_detail_query_windows_update_history" -}}
|
||||
[
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660227583",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.144.0)",
|
||||
"update_id": "5473a0ab-87a6-4fa3-8ede-c7e28521f06d",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.144.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660227566",
|
||||
"description": "After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "http://support.microsoft.com",
|
||||
"title": "Windows Malicious Software Removal Tool x64 - v5.104 (KB890830)",
|
||||
"update_id": "b5292e9e-d174-4ae1-be7f-10092f940b10",
|
||||
"update_revision": "200"
|
||||
"title": "Windows Malicious Software Removal Tool x64 - v5.104 (KB890830)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660173924",
|
||||
"description": "Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "Others",
|
||||
"service_id": "8b24b027-1dee-babb-9a95-3517dfb9c552",
|
||||
"support_url": "https://support.microsoft.com/help/5016629",
|
||||
"title": "2022-08 Cumulative Update for Windows 11 for x64-based Systems (KB5016629)",
|
||||
"update_id": "8da25b5f-b5e1-455e-9ae9-7697212593d7",
|
||||
"update_revision": "1"
|
||||
"title": "2022-08 Cumulative Update for Windows 11 for x64-based Systems (KB5016629)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660169290",
|
||||
"description": "A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://support.microsoft.com/help/5012170",
|
||||
"title": "2022-08 Security Update for Windows 11 for x64-based Systems (KB5012170)",
|
||||
"update_id": "36cf5ff2-8923-4fd5-b0c7-1a8360c859c8",
|
||||
"update_revision": "200"
|
||||
"title": "2022-08 Security Update for Windows 11 for x64-based Systems (KB5012170)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660147454",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.94.0)",
|
||||
"update_id": "d8742524-cb74-4a9e-810d-d07722f41a06",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.94.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660102200",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.70.0)",
|
||||
"update_id": "e00d65af-cc92-4279-bdb1-8bbe0bfe1b90",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.373.70.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1660016612",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1673.0)",
|
||||
"update_id": "bacaeb44-353d-46cb-8d72-9d36fa0333d2",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1673.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1660016594",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "-2145124300",
|
||||
"operation": "Installation",
|
||||
"result_code": "Failed",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1607.0)",
|
||||
"update_id": "d97f517e-945b-4ad5-9e75-c2da93b5af38",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1607.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659811407",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1544.0)",
|
||||
"update_id": "85aa60dd-e4bb-4b20-9ad1-08f7f029a45e",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1544.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659713853",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1482.0)",
|
||||
"update_id": "ea830905-b3e6-46b1-b90d-6b126a3f6d1b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1482.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1659672608",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1459.0)",
|
||||
"update_id": "9b723c83-8ba3-4a28-a7b6-f4ed9b9a5e95",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1459.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659643463",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1429.0)",
|
||||
"update_id": "cacd2916-1bdc-4272-85ff-34f18719fcf3",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1429.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659545734",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1359.0)",
|
||||
"update_id": "d099df3c-873e-4af5-97a8-43414a96cb99",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1359.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659498651",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1323.0)",
|
||||
"update_id": "d06da942-e5d0-4117-a20f-43da745ffd9c",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1323.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659409977",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1261.0)",
|
||||
"update_id": "a2682975-9c13-4d8d-b8f4-62f81fa4347b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1261.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659409929",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)",
|
||||
"update_id": "09313b74-907a-4cf6-8060-1f59d6a10731",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1659330382",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)",
|
||||
"update_id": "09313b74-907a-4cf6-8060-1f59d6a10731",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659330368",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "-2145124330",
|
||||
"operation": "Installation",
|
||||
"result_code": "Failed",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)",
|
||||
"update_id": "09313b74-907a-4cf6-8060-1f59d6a10731",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1186.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659329478",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)",
|
||||
"update_id": "599a2ff1-b6df-4444-b26c-446d9af6e26b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1659207465",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)",
|
||||
"update_id": "599a2ff1-b6df-4444-b26c-446d9af6e26b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659207451",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "-2145124330",
|
||||
"operation": "Installation",
|
||||
"result_code": "Failed",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)",
|
||||
"update_id": "599a2ff1-b6df-4444-b26c-446d9af6e26b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1089.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659121021",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1046.0)",
|
||||
"update_id": "3bc56d18-761c-42d3-a7ff-a3e12ed035aa",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.1046.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1659057815",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.986.0)",
|
||||
"update_id": "b97712ac-53f0-4708-8239-99473c598dbc",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.986.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658879639",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.884.0)",
|
||||
"update_id": "d231a8d0-d509-48b6-baed-0341ff62e1a8",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.884.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658685407",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.745.0)",
|
||||
"update_id": "b6cc166b-4515-4fa0-971c-e650d0adfbd7",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.745.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658602293",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.677.0)",
|
||||
"update_id": "381fad12-3731-45c2-9a25-998185837690",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.677.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658557946",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.656.0)",
|
||||
"update_id": "7f151bd7-590a-4534-b22c-bbf22dab77e5",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.656.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658507073",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.607.0)",
|
||||
"update_id": "31944978-5a79-4806-8098-c99869a633d8",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.607.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658420173",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.550.0)",
|
||||
"update_id": "e7671a87-c1fc-4333-9b5a-0b2bcf9efb0b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.550.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658286565",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.455.0)",
|
||||
"update_id": "c353c17b-30ae-4bf8-9aae-9371750fefeb",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.455.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658197038",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.400.0)",
|
||||
"update_id": "e73cc969-7675-4d5f-a635-0dd5511a266b",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.400.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1658090554",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.323.0)",
|
||||
"update_id": "01dd2e51-379b-46d0-98a1-a960d72269f0",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.323.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658089986",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.312.0)",
|
||||
"update_id": "53593c2d-14f4-43c5-85b7-1634cac1ede3",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.312.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658037571",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)",
|
||||
"update_id": "881d85b0-bd1f-4c5b-8a0f-9c5167d35b4a",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Windows Defender",
|
||||
"date": "1658030188",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)",
|
||||
"update_id": "881d85b0-bd1f-4c5b-8a0f-9c5167d35b4a",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1658030178",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "-2145124330",
|
||||
"operation": "Installation",
|
||||
"result_code": "Failed",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)",
|
||||
"update_id": "881d85b0-bd1f-4c5b-8a0f-9c5167d35b4a",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.279.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657935991",
|
||||
"description": "Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "Others",
|
||||
"service_id": "8b24b027-1dee-babb-9a95-3517dfb9c552",
|
||||
"support_url": "https://support.microsoft.com/help/5015814",
|
||||
"title": "2022-07 Cumulative Update for Windows 11 for x64-based Systems (KB5015814)",
|
||||
"update_id": "8f459841-60e3-44fc-8e8c-498c4e847ea7",
|
||||
"update_revision": "1"
|
||||
"title": "2022-07 Cumulative Update for Windows 11 for x64-based Systems (KB5015814)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657935299",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.203.0)",
|
||||
"update_id": "8325b53b-d4a4-4459-849f-5892c92404ae",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.203.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657935289",
|
||||
"description": "After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "http://support.microsoft.com",
|
||||
"title": "Windows Malicious Software Removal Tool x64 - v5.103 (KB890830)",
|
||||
"update_id": "675d532b-cdd5-4f87-a918-72af430c86a9",
|
||||
"update_revision": "200"
|
||||
"title": "Windows Malicious Software Removal Tool x64 - v5.103 (KB890830)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657757470",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.115.0)",
|
||||
"update_id": "304fbbdc-9e70-40da-8da4-9014aa74594e",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.115.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657650109",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.44.0)",
|
||||
"update_id": "880c557a-10e6-4e2d-9530-5ad4822ac6fd",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.44.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657641156",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.16.0)",
|
||||
"update_id": "919cbf28-db5b-4870-a6de-7c8eb25518fe",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.371.16.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "Update;ScanForUpdates",
|
||||
"date": "1657641137",
|
||||
"description": "9NCBCSZSJRSB-1152921505695029292",
|
||||
"hresult": "-2145124300",
|
||||
"operation": "Installation",
|
||||
"result_code": "Failed",
|
||||
"server_selection": "Others",
|
||||
"service_id": "855e8a7c-ecb4-4ca3-b045-1dfa50104289",
|
||||
"support_url": "",
|
||||
"title": "9NCBCSZSJRSB-SpotifyAB.SpotifyMusic",
|
||||
"update_id": "9d3bd172-9645-4e35-bf20-6f1fad7ba3d3",
|
||||
"update_revision": "1"
|
||||
"title": "9NCBCSZSJRSB-SpotifyAB.SpotifyMusic"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657557959",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1148.0)",
|
||||
"update_id": "70253a97-4c9b-4812-975b-85562f5f36b8",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1148.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657500736",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1114.0)",
|
||||
"update_id": "99b17c58-2c6f-41d8-bb9c-7bbc99770b29",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1114.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657393149",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1040.0)",
|
||||
"update_id": "27f8bb97-ea08-4d37-b2ba-0ca21ed41840",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.1040.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657249086",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.928.0)",
|
||||
"update_id": "888c571d-cc0e-447d-91c7-83728a991c3a",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.928.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1657077995",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.852.0)",
|
||||
"update_id": "3ebc9114-06d2-4e0f-9ae3-7beba95ebf31",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.852.0)"
|
||||
},
|
||||
{
|
||||
"client_app_id": "MoUpdateOrchestrator",
|
||||
"date": "1656996720",
|
||||
"description": "Install this update to revise the files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed.",
|
||||
"hresult": "0",
|
||||
"operation": "Installation",
|
||||
"result_code": "Succeeded",
|
||||
"server_selection": "WindowsUpdate",
|
||||
"service_id": "",
|
||||
"support_url": "https://go.microsoft.com/fwlink/?LinkId=52661",
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.788.0)",
|
||||
"update_id": "32e8bd2a-c399-45f1-93fa-b86f62e4c1bb",
|
||||
"update_revision": "200"
|
||||
"title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.369.788.0)"
|
||||
}
|
||||
]
|
||||
{{- end }}
|
||||
|
||||
Reference in New Issue
Block a user