Commit Graph
6566 Commits
Author SHA1 Message Date
bb2801ac38 submitting new blogpost content (#9563)
adding new article for splunk , osquery, mitre attck

---------

Co-authored-by: Dave Herder <dave@fleetdm.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-01-30 17:20:46 -05:00
Lucas Manuel Rodriguez 8163b7d8da Update live query selector logic (OR -> AND) (#9559)
See requirements in #8682.

Two assumptions on the implementation (@zayhanlon please take a look):
- Hosts explicitly selected to run always run the live query (no matter
the values on the selectors).
- When selecting `All hosts`, selecting any other platform or label is
kind of a no-op. We should look into graying out all the selectors if
the user selects `All hosts`.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-30 18:35:56 -03:00
Charlie Chance adfdce3861 handbook: Breezy tutorial (#9564) 2023-01-30 13:47:00 -07:00
Jacob ShandlingandJacob Shandling 0698e693c7 UI: Controls page polish (#9560)
# Follow up for #9349

- Address remaining small styling, directory organization/naming issues,
other than masthead styles, which are addressed separately

# Checklist for submitter
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 12:26:34 -08:00
Jacob ShandlingandJacob Shandling 60712144f2 UI: Add automatic EnrollMdm modal (#9455)
# Addresses #9365 

# Implements
MDM enrollment modal that handles both automatic and manual enrollment
instructions:
- Automatic:
<img width="1181" alt="Screenshot 2023-01-20 at 4 33 50 PM"
src="https://user-images.githubusercontent.com/61553566/213829293-6d4a5053-9a3c-4f52-8cf8-a6607dc8df4e.png">
- Manual:

<img width="1158" alt="Screenshot 2023-01-20 at 4 35 04 PM"
src="https://user-images.githubusercontent.com/61553566/213829369-73ae779d-14a8-4aa7-9c6a-b97d046d0dc1.png">

- Also includes (by mistake, but might as well include them now) some
small bash scripts for use in MDM development
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` 
- [x] Updated testing inventory
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 11:44:33 -08:00
Luke Heath d3565dc032 Finalized new masthead styling (#9536) 2023-01-30 13:37:51 -06:00
Marcos Oviedo 72c91744fe Fixing issue on mdm_bridge table enrollment status information (#9557)
This relates to #9310 

The enrollment status was being wrongly set and this PR fixes that
2023-01-30 15:17:38 -03:00
Sharon Katz ed314592c3 CIS 5.2 fixes (#9549) 2023-01-30 12:52:33 -05:00
Martin Angers c64cf8f753 Document generating SCEP via fleetctl (#9503) 2023-01-30 10:46:58 -05:00
Marcos Oviedo 97c06791dc Adding new Windows MDM table to interact with the Windows MDM stack (#9448) 2023-01-30 11:29:29 -03:00
Mike McNeil eade58565f xprotect_meta: Improve table docs: Link to where to get the foreign key (#9543) 2023-01-27 17:58:11 -06:00
Mike McNeil 73b8f96f71 Make it so chrome_extensions shows up in a search for "browser plugins", same for firefox/ie/safari (#9540)
.
2023-01-27 17:44:05 -06:00
Luke Heath 77cfb3da30 Add frontend group to codeowners (#9542) 2023-01-27 17:35:38 -06:00
Mike McNeil 3833ef4c40 Tables: Create ie_extensions.yml (#9541)
for https://github.com/fleetdm/fleet/pull/9540/files
2023-01-27 17:27:04 -06:00
Eric c238b90ecc Website: Add RSS feeds for articles (#9526)
Closes: https://github.com/fleetdm/fleet/issues/6493

Changes:
- Added a new action, `get-one-rss-feed.js`. This action generates and
returns RSS feeds for article categories on fleetdm.com.
    - This action has one required input: `categoryName`.
- Lives at `/rss/[Article Category Name]` e.g.,
`fleetdm.com/rss/releases`
- If `articles` is provided as the category, it returns an RSS feed of
all articles published on our blog.
- Updated `view-basic-article.js` to set an `articleCategorySlug`
variable, that is used to link to the RSS feed for an article category
from an article page.
- Added a "subscribe" button to articles and article category pages that
links to an RSS feed for that category.
2023-01-27 16:58:53 -06:00
Gabriel Hernandez 091ee35ba6 implement macOS update content (#9469) 2023-01-27 16:25:53 -06:00
RachelElysia 70bfc06d0c Fleet UI: MDM Apple APN API (#9533) 2023-01-27 16:05:26 -05:00
Mo Zhu e85f189d33 Update QA process and filters (#9454) 2023-01-27 11:20:10 -08:00
RachelElysia de89304e4c Fleet UI: Fix table button icons misalignment (#9513) 2023-01-27 14:16:03 -05:00
RachelElysia c4ba1b0396 Fleet UI: Fix host page pagination (#9492) 2023-01-27 14:14:58 -05:00
Juan Fernandez e376d53294 Bug 9386: Docs chrome extension has the wrong CPE. (#9524)
Related to #9386 - this should fix one of the three reported problems.

* Add the ability to add exclusion rules to cpe_translations.
* Added exclusion rule for Docs chrome extension.
2023-01-27 15:11:20 -04:00
Roberto Dip 090e9a17c3 doubly encode the CSR in base64 (#9532)
When the file is provided as an attachment to the Sails helper, it gets
decoded, since we need for the signed CSR to be delivered in base64
format, we doubly encode the contents before sending the email.
2023-01-27 10:54:40 -08:00
Charlie Chance 102354be8a Handbook: Cadence updates (#9521)
https://docs.google.com/spreadsheets/d/144l7vdZVNkK8HlLG399L3IYYqZTTOduzgjdl8Pcvl5c/edit#gid=0
2023-01-27 11:04:07 -07:00
Lucas Manuel Rodriguez bfe27475c1 Fix cis yaml (#9531)
The PR fixes the broken yaml in main and adds checks so that it doesn't
happen again.
2023-01-27 14:58:00 -03:00
Roberto Dip b4f46bf91c run go mod tidy and fix incorrectly imported dependency (#9529)
Two minor things are happening here:

1. A new direct dependency was added in #9489, this runs `go mod tidy`
to update `go.mod` and `go.sum`
2. `"go.uber.org/atomic"` was automatically imported instead of
`"sys/atomic"` in #9494
2023-01-27 14:51:27 -03:00
Charlie ChanceandEric ad2ed36519 Charlotte chance patch 2 (#9530)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-01-27 09:41:32 -07:00
Sharon Katz 218f10eefe Cis 2.12.2 (#9525) 2023-01-27 11:16:41 -05:00
Marcos Oviedo dd33a7a29a Fixing osquery shell issue caused by osquery extension namedpipe name reuse (#9527)
There was an issue when the osqueryd instance ran through `orbit shell` attempted to register the same named pipe name used by the osqueryd instance launched by orbit service
2023-01-27 12:34:38 -03:00
Roberto Dip 0c9a79b248 Adjust Nudge configuration to match the specification (#9519)
Related to #9013 this adjusts the Nudge configuration to match the spec.
2023-01-26 19:52:03 -03:00
Sharon Katz aa513e722c CIS 3.1 (#9510) 2023-01-26 16:53:58 -05:00
Marcos Oviedo 86c2b9ada0 Setting restricted ACL for windows secret-orbit-node-file (#9457)
Setting restricted ACL for windows secret-orbit-node-file
2023-01-26 18:51:24 -03:00
Sharon Katz 3aa2a607e7 CIS 5.2.x queries (#9501) 2023-01-26 16:22:21 -05:00
Charlie Chance d30ac394ae Charlotte chance patch 2 (#9520) 2023-01-26 14:16:05 -07:00
Charlie ChanceandEric 32cd29adeb Charlotte chance patch 1 (#9518)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-01-26 13:54:46 -07:00
Eric d006f1205d Website: Add Docsearch to /tables pages (#9517)
Changes:
- Added Algolia DocSearch to osquery schema table pages.
2023-01-26 14:48:39 -06:00
Jacob ShandlingandJacob Shandling 8a5569cd1b 9349 new controls page (#9431)
# Addresses #9349

# Implements
https://www.loom.com/share/bbf8d6f97fe74e65a0c9a394f1bda3f1
- New Controls page, only visible to Global|Team Admins|Maintainers
- Header for free users is 'Controls', for premium is a teams filter
dropdown that defaults to 'No teams,' which filters via updating the URL
query param "team_id"
    - Includes tabs macUpdates (default) and macSettings
- Cleaned up how site nav items are conditionally included/excluded
based on authorization – see
`frontend/components/top_nav/SiteTopNav/navItems.ts`
- Updated masthead styles: Removed icons from site nav links; updated
colors and spacing; Updated default user avatar TBD in separate PR
(waiting on guidance)

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` 
- [x] Updated testing suite inventory
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-26 11:33:54 -08:00
Marcos Oviedo 86c1916989 Removing orbit files using MSI installer custom actions (#9362)
Adding powershell custom action on WIX installer to remove Orbit folder during product uninstall
2023-01-26 15:14:31 -03:00
Mike McNeil 41f89365dd Low-level MDM commands are free (#9514) 2023-01-26 12:03:56 -06:00
Eric a5a6e3ca23 Handbook: Update <call-to-action> component example (#9507)
Changes:
- Updated the `<call-to-action>` component example in the article
formatting guide handbook page to use the correct quotation marks (`”` »
`"`)
2023-01-25 19:25:36 -06:00
Mike McNeil 20836dc295 Sentence case (#9487)
https://fleetdm.com/handbook/marketing/content-style-guide#sentence-case
2023-01-25 17:33:13 -06:00
Sharon Katz bfed99f746 Have a single schema owner (#9506) 2023-01-25 16:38:02 -06:00
Jan Christian Grünhage e5790521ca detect nixos as a linux platform (#9468)
# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
2023-01-25 18:03:24 -03:00
Sharon Katz 86c4c15d6b Cis 5.2.x (#9489) 2023-01-25 15:53:24 -05:00
Eric 055031e19f Update schema folder readme (#9502)
Changes:
- Updated the `schema/` folder readme to have information about the
`schema/tables/` folder, and YAML overrides.
2023-01-25 14:29:03 -06:00
Marcos Oviedo d7f77f55ce Windows MDM research (#9500)
Adding a tool to showcase how to perform MDM programmatic enrollment on
Windows. Moved Windows MDM PoC server to a new location
2023-01-25 17:05:19 -03:00
Roberto Dip 851545c21f create and send Nudge configuration to hosts (#9491)
related to #9348
2023-01-25 17:03:40 -03:00
Martin Angers d0e6891d10 Add endpoint to trigger CSR request for APNs on fleetdm.com (#9494) 2023-01-25 14:44:29 -05:00
Sharon Katz f095431f12 Add code owners (#9499) 2023-01-25 14:25:57 -05:00
Lucas Manuel Rodriguez 91c93285d8 Add WIP macOS 13 CIS policy queries (#9497)
#9429
2023-01-25 16:15:12 -03:00
Katheryn Satterlee 0c1ec16dc4 Include information on flags for fleetctl apply (#9493)
Added details on using flags to change behavior when applying team and
config specs using fleetctl
2023-01-25 10:43:46 -06:00