Commit Graph
597 Commits
Author SHA1 Message Date
Kelvin Oghenerhoro Omereshone 31459b97e4 fix: add clarity on signing and notarising on macOS (#3714)
Add clarity on signing and notarising macOS osquery installers
2022-01-17 18:30:18 +01:00
Zach Wasserman 6bc4718a20 Update FAQ for duplicate host enrollment (#3698) 2022-01-14 09:58:56 -08:00
Kelvin Oghenerhoro Omereshone 27c76a0e47 fix: update link to Orbit repository (#3684)
Current link leads to the archived Orbit repo
2022-01-14 18:25:50 +01:00
Kelvin Oghenerhoro Omereshone 5b3d7bb55c fix: typo on indefinite article used (#3641)
Fixed the use of `an` instead of `a`
2022-01-12 17:31:17 +01:00
Martin Angers f14f97156c Add read and write timeout options for redis (#3624) 2022-01-11 17:08:39 -05:00
Noah Talerman d7e013643c Remove policies from standard-query-library.yml (#3636)
- For now, remove policies from `standard-query-library.yml` so that the `fleetctl preview` command does not fail
2022-01-11 11:30:37 -05:00
Noah Talerman 0647e0b641 Add contributors to standard policies (#3635)
- Resolve failing "Deploy Fleet Website" CI task
2022-01-11 11:11:37 -05:00
Noah Talerman 76dba03628 Add product process to handbook and update vuln processing docs (#3629)
- Add outline of the product process to handbook
- Add a "Priority drafting" section to handbook
- Update the vulnerability processing docs
2022-01-11 09:15:49 -05:00
Tomas Touceda c662cd2b53 Add policies yaml (#3464)
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
2022-01-11 11:04:29 -03:00
Kelvin Oghenerhoro Omereshone 6c851e0e12 [DOCS] add docs for signing osquery installers with fleetctl (#3577)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* chore: add dominuskelvin as maintainer

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add link to signing installers

* fix: typo with link to the getting started page

* feat: docs on how to sign an osquery installer

* feat: make signing installer a subsection of osquery installer

* feat: make description for signing installer shorter and compact

* fix: change package to installers

* fix: reword note section
2022-01-10 17:31:10 +01:00
Mike McNeil eba183d506 add clarification about 90s timeout in new api endpoint (#3592)
* add clarification about 90s timeout

* further clarify warning based on Tomas's feedback
2022-01-06 22:51:55 -06:00
Mike Thomas c6f9cb4cf3 Update FAQ.md (#3552)
* Update FAQ.md

Added a question about duplicate IP addresses.

* Update docs/01-Using-Fleet/FAQ.md

Add relevant link to "Fleet's teams feature..."
2022-01-05 13:25:56 +09:00
Luke Heath a269e9a5f9 Update 02-Testing.md 2022-01-04 16:50:49 -06:00
Kelvin Oghenerhoro Omereshone 897fa82ec1 Feature/add query to get apps opened within the last 24 hours (#3513)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days
2022-01-04 22:25:18 +01:00
Noah Talerman 40ba098913 Add "Automations" documentation page (#3537)
- Add "Automations" documentation page to document the available automations in Fleet
- Update the "Vulnerability processing" documentation
- Update the "REST API" documentation
2021-12-30 17:50:27 -05:00
Sevickson e776c2ea36 Dedup Get installed Windows software query (#3417)
python_packages query was 2 times in the same query
2021-12-27 18:39:31 -03:00
Lucas Manuel Rodriguez 787944482b Global policies automation webhooks (#3378)
* Add webhook to app config

* Add redis failing policies set and webhook

* Add basic webhook test

* Store hostname in redis

* Global policy deletion to remove policy ID from set and config

* Also process new passing policies

* Fix unit test

* Sort hosts

* Add more tests

* Add ListSets to the failing policies interface

* Fix server URL and garbage collect on the triggering side

* Do not use Redis SCAN

* Fix Redis operation order

* Add API changes to doc

* Add comments

* Add more tests

* Fix tests

* Add tests for config update upon deletion of policies

* Run make dump-test-schema

* Ignore policies that failed to run

* Add proper unit tests to trigger logic

* Fix comments

* WIP

* Add tests to service_osquerty_test.go

* Use SSCAN for listing hosts instead of SMEMBERS

* Add failing policies to docs/01-Using-Fleet/configuration-files/README.md

* Remove skip

* Fix PR comments
2021-12-23 18:26:55 -03:00
Martin Angers 1e2059585a Add support for google chrome profiles (#3423) 2021-12-21 15:36:19 -05:00
Omereshone Kelvin 27691fe82a Fix a typo in a configuration flag (#3405)
Fixed a typo in the `allow_missing_migrations` configuration flag.
2021-12-21 08:19:48 -08:00
Tomas Touceda fe67b0486b Finish first draft of API versions (#3216)
* Finish first draft of API versions

* wip

* Finalize tests

* Revert change in handler

* Remove made up version

* Update versioning with aliases

* Add changes file

* Address review comments

* Revert overupdated routes

* Expand life time of deprecated APIs

* Fix test

* Comment out problematic part of test

* Revert bad path changes
2021-12-21 12:23:12 -03:00
Tomas Touceda 7d527f9d01 Update faq with common problem in docker (#3438) 2021-12-21 11:25:00 -03:00
Tomas Touceda 5a9e207fbf Update documentation and add changes file (#3437) 2021-12-21 10:47:02 -03:00
Katheryn Satterlee 2c8f0dac42 Update Kafka Rest Plugin results section
Corrected `##### kafkarest_result_topic` to indicate that it set the results log location rather than status.
2021-12-20 08:06:53 -06:00
Katheryn Satterlee 9eeaf5ed16 Add links in configuration docs (#3393)
Added links from configuration docs to osquery logs docs for logging plugins. Resolves #2872
2021-12-17 18:06:41 -06:00
Mike McNeil 552b2c9f54 capitalization (#3388) 2021-12-15 16:41:48 -06:00
Tony Gauda 00ccdfdce8 Update standard-query-library.yml to detect Log4J (#3367)
Added query to detect Log4j in response to CVE-2021–44228 on macOS and Linux
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-12-14 14:54:11 -08:00
Martin Angers 4143a37056 Fix redis scan keys issue for live queries (#3107) 2021-12-14 16:30:26 -05:00
Zach Wasserman ac3d8ddf02 Increase default login session length to 24 hours (#3340) 2021-12-13 20:42:30 -08:00
Noah Talerman ca6c51d397 API docs: Add host status webhook parameters to PATCH /config docs (#3348) 2021-12-13 14:48:03 -05:00
Omereshone Kelvin 7d77579ead Update description for query to get apple applications count (#3330) 2021-12-12 18:03:56 -08:00
Omereshone Kelvin 64203a022a Fix duplicated description on standard query (#3286) 2021-12-12 18:02:52 -08:00
Omereshone Kelvin 8ec3986263 Fix description language on failing batteries query (#3328) 2021-12-11 16:24:41 -08:00
Omereshone Kelvin c5aaeaab6f Add description to windows machines with unencrypted hard disks query (#3329) 2021-12-11 16:23:42 -08:00
Noah Talerman 1f8f5b0d27 Update recieve-from-github.js and add fixes to API docs (#3310) 2021-12-10 15:40:29 -05:00
Zach Wasserman 2f4ea1da85 Update documentation for file carving (#3213) 2021-12-09 09:59:23 -08:00
Omereshone Kelvin 10871172f6 Standard query library: Add description to "Get laptops with failing batteries" (#3254) 2021-12-09 12:23:54 -05:00
Zach Wasserman 9343c9b832 Fix broken link in documentation (#3270) 2021-12-08 22:18:50 -06:00
Tony Gauda c39191cb00 Updated docs to fix a few areas of confusion (#2903)
* updating docs to make things a bit more clear

* fixing broken links

* more broken links

* fixing broken links

* website updates

* PR review changes

* fixing bad links
2021-12-08 16:23:35 -06:00
Zach Wasserman 1806838cf4 Update documentation for redis cluster support (#3246) 2021-12-07 18:36:01 -08:00
Lucas Manuel Rodriguez edec1abc86 Remove platform and team from policy editing (#3233) 2021-12-07 13:01:00 -03:00
gillespi314andeashaw 6ee6dba4a4 Update anonymous usage statistics to record Fleet feature adoption (#3056)
* Collect additional anonymous usage statistics

* Update fleetdm.com and docs for usage stats

* Fix lint-go errors

* Fix failing test

* update webhook inputs

* Update receive-usage-analytics.js

* fix failing test

* Update statistics_test.go

Co-authored-by: eashaw <eashaw@sailsjs.com>
2021-12-06 14:39:00 -06:00
Lucas Manuel Rodriguez c5375263b6 Change policy platforms name to platform singular (for consistency) (#3221)
* Change policy platforms name to platform singular

* Fix fleetctl tests
2021-12-06 13:56:28 -03:00
Omereshone Kelvin 71883ede82 Update instructions for contributing multiple queries to the standard query library (#3207) 2021-12-06 10:15:05 -05:00
Omereshone Kelvin 5a2ed6f395 Add 3 queries to the standard query library (#3138)
Queries:
- Get applications hogging memory
- Get Mac and Linux machines with unencrypted primary disks
- Get servers with root login in the last 24 hours
2021-12-03 17:13:41 -05:00
Lucas Manuel Rodriguez b9a408704e Add platforms field to policies (#3181)
* Add platforms field to policies

* Fix fleetctl tests

* PR review changes

* Add missing tests

* Add changes for ListPoliciesForHost
2021-12-03 15:33:33 -03:00
Tomas Touceda 142006cbdd Issue 2099 enable vulnerability processing new installs (#3104)
* Enable vulnerability processing by default

* Add changes file

* Remove wrong env var

* Fix import

* Fix tests

* Update log line

* Remove unneeded import
2021-12-03 14:44:57 -03:00
Tomas Touceda a0404b6736 Add software count API (#3105)
* Add software count API

* Fix makefile

* Fine no mock generating at this point

* Actually, one last try

* Use go install instead

* Fix go sum/mod

* Improve documentation

* Try setting node to 14
2021-12-03 10:54:17 -03:00
Omereshone Kelvin 2302606ca0 Standard query library: add query for running docker containers (#3137)
Query: Get running docker containers
2021-12-01 09:42:56 -05:00
Tomas Touceda 925d4df8f7 Add new disable_failing_policies query parameter to list hosts (#3123)
* Update documentation

* Update based on review comments

* Explain why the switch exists
2021-11-29 18:04:33 -03:00
Tomas Touceda 036093874d Add cursor pagination to list hosts (#3120)
* Add cursor pagination to list hosts

* Update docs

* Update based on review comments
2021-11-29 15:06:00 -03:00