Noah TalermanandEric
000b2835c6
And add redirects Part of the following issue: - https://github.com/fleetdm/fleet/issues/41419 <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Updated legacy documentation redirects so older `/docs/using-fleet/*` and `/guides/*` URLs now point to the correct current guide and report destinations (301), including fixes for Fleet UI, learn-how-to-use, and report/library links. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Eric <eashaw@sailsjs.com>
2.7 KiB
2.7 KiB
Report library
Fleet's report library includes a growing collection of useful policies and miscellaneous reports for organizations deploying Fleet.
Importing the reports in Fleet
After cloning the fleetdm/fleet repo, import the reports and policies found in docs/01-Using-Fleet/standard-query-library/standard-query-library.yml using fleetctl:
fleetctl apply -f docs/01-Using-Fleet/standard-query-library/standard-query-library.yml
Contributors
Do you want to add your own policy or report?
- Please copy the following YAML section and paste it at the bottom of the
standard-query-library.ymlfile.
---
apiVersion: v1
kind: query
spec:
name: What is your query called? Please use a human-readable query name.
platforms: What operating systems support your query? This can usually be determined by the osquery tables included in your query. Heading to the https://osquery.io/schema webpage to see which operating systems are supported by the tables you include.
description: Describe your query. What information does your query reveal? (optional)
query: Insert query here
purpose: What is the goal of running your query? Ex. Detection
remediation: Are there any remediation steps to resolve the detection triggered by your query? If not, insert "N/A."
contributors: zwass,mike-j-thomas
tags: Keywords that can help users find other relevant queries; a comma should separate each tag. (e.g., "foo, bar")
-
Replace each field and submit a pull request to the fleetdm/fleet GitHub repository.
-
If you want to contribute multiple queries, please open one pull request that includes all your queries.
For instructions on submitting pull requests to Fleet, check out the Committing Changes section in the Contributors documentation.
Additional resources
Listed below are great resources that contain additional reports (queries).
- Osquery (https://github.com/osquery/osquery/tree/master/packs)
- Palantir osquery configuration (https://github.com/palantir/osquery-configuration/tree/master/Fleet)