Rachael ShawandEric 55df14a23e Update schema overrides to clarify which tables require joining against users (#18045) ...

For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>

2024-04-05 11:11:18 -05:00

..

account_policy_data.yml

Update account_policy_data.yml (#16963)

2024-02-21 12:46:58 -06:00

acpi_tables.yml

…

ad_config.yml

…

alf_exceptions.yml

…

alf_explicit_auths.yml

…

alf.yml

…

apfs_physical_stores.yml

Add macOS CIS 5.3.1 (#10397)

2023-03-10 12:29:14 -05:00

apfs_volumes.yml

Add macOS CIS 5.3.1 (#10397)

2023-03-10 12:29:14 -05:00

app_icons.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

app_schemes.yml

…

apps.yml

…

apt_sources.yml

…

arp_cache.yml

…

asl.yml

…

augeas.yml

…

authdb.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

authorization_mechanisms.yml

…

authorizations.yml

…

authorized_keys.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

azure_instance_metadata.yml

…

azure_instance_tags.yml

…

battery.yml

…

bitlocker_info.yml

…

block_devices.yml

…

browser_plugins.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

carbon_black_info.yml

…

certificates.yml

Update certificates.yml to include warning about potential corruption… (#13976)

2023-09-25 10:33:53 -07:00

chrome_extension_content_scripts.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

chrome_extensions.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

cis_audit.yml

New CIS Audit table (#11381)

2023-05-12 11:16:36 -03:00

corestorage_logical_volume_families.yml

Add macOS CIS 5.3.2 (#10726)

2023-03-28 11:57:38 -04:00

corestorage_logical_volumes.yml

Add macOS CIS 5.3.2 (#10726)

2023-03-28 11:57:38 -04:00

cpu_time.yml

…

cpuid.yml

…

crashes.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

crontab.yml

…

cryptoinfo.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

cryptsetup_status.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

csrutil_info.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

cups_destinations.yml

…

cups_jobs.yml

…

curl_certificate.yml

…

curl.yml

…

deb_packages.yml

…

device_firmware.yml

…

disk_encryption.yml

…

disk_events.yml

…

disk_info.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

dns_cache.yml

…

dns_resolvers.yml

…

docker_container_envs.yml

…

docker_container_labels.yml

…

docker_container_mounts.yml

…

docker_container_networks.yml

…

docker_container_ports.yml

…

docker_containers.yml

…

docker_images.yml

…

docker_volumes.yml

…

dscl.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

etc_hosts.yml

…

etc_services.yml

…

event_taps.yml

…

falcon_kernel_check.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

falconctl_options.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

file_lines.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

file.yml

…

filevault_prk.yml

Create new Fleet osquery extension table to read escrowed FileVault key (#12198)

2023-06-15 10:23:59 -05:00

filevault_status.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

filevault_users.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

find_cmd.yml

macOS CIS: Use find command (exposed as fleetd table) instead of relying on the osquery core file table (#12560)

2023-06-29 16:22:41 -03:00

firefox_addons.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

firefox_preferences.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

firmware_eficheck_integrity_check.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

firmwarepasswd.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

gatekeeper.yml

…

geolocation.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

google_chrome_profiles.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

groups.yml

…

hash.yml

…

homebrew_packages.yml

…

icloud_private_relay.yml

Update icloud_private_relay.yml (#11700)

2023-05-15 13:45:24 -05:00

ie_extensions.yml

Make it so chrome_extensions shows up in a search for "browser plugins", same for firefox/ie/safari (#9540)

2023-01-27 17:44:05 -06:00

interface_addresses.yml

…

interface_details.yml

…

interface_ipv6.yml

…

iokit_devicetree.yml

…

iokit_registry.yml

…

ioreg.yml

Add docs for new tables (#15046)

2023-11-17 12:17:23 -06:00

iptables.yml

Schema: Hide iptables table. (#14054)

2023-09-26 16:49:48 -05:00

kernel_extensions.yml

…

kernel_info.yml

…

kernel_panics.yml

…

keychain_acls.yml

…

keychain_items.yml

Update keychain_items.yml to include warning about potential corruption of the certificate (#13975)

2023-09-25 10:33:30 -07:00

known_hosts.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

last.yml

…

launchd.yml

…

listening_ports.yml

…

load_average.yml

…

location_services.yml

…

logged_in_users.yml

…

macadmins_unified_log.yml

Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)

2024-03-27 08:17:28 -05:00

macos_profiles.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

macos_rsr.yml

Add macos_rsr table from macadmins extension (#11537)

2023-05-05 11:02:28 -03:00

managed_policies.yml

clarify blank username attribute is global (#10836)

2023-03-29 10:12:04 -07:00

mdls.yml

…

mdm_bridge.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

mdm.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

mounts.yml

Update schema example for mounts table (#12779)

2023-07-18 15:30:33 -07:00

munki_info.yml

Adds attribution to MacAdmins osquery extension. (#14616)

2023-10-20 06:57:04 -07:00

munki_installs.yml

Adds attribution to MacAdmins osquery extension. (#14616)

2023-10-20 06:57:04 -07:00

network_interfaces.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

nfs_shares.yml

…

npm_packages.yml

Update npm_packages.yml (#12489)

2023-07-14 16:27:18 -05:00

ntdomains.yml

…

nvram_info.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

nvram.yml

…

orbit_info.yml

Adding doc changes for configuring fleetd channels remotely (#15872)

2024-01-04 10:23:51 -03:00

os_version.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

osquery_events.yml

…

osquery_extensions.yml

…

osquery_flags.yml

…

osquery_info.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

osquery_packs.yml

…

osquery_registry.yml

…

osquery_schedule.yml

…

package_bom.yml

…

package_install_history.yml

…

package_receipts.yml

…

parse_ini.yml

Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)

2024-04-03 09:13:04 -07:00

parse_json.yml

Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)

2024-04-03 09:13:04 -07:00

parse_jsonl.yml

Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)

2024-04-03 09:13:04 -07:00

parse_xml.yml

Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)

2024-04-03 09:13:04 -07:00

password_policy.yml

…

pci_devices.yml

…

platform_info.yml

…

plist.yml

…

pmset.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

power_sensors.yml

…

preferences.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

privacy_preferences.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

process_envs.yml

…

process_events.yml

…

process_file_events.yml

fleetdm.com/tables: Add Fleet override for process_file_events docs (#16503)

2024-02-02 15:47:23 -05:00

process_memory_map.yml

…

process_open_files.yml

…

process_open_sockets.yml

…

processes.yml

…

puppet_info.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

puppet_logs.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

puppet_state.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

pwd_policy.yml

add minimumMixedCaseCharacters (#10401)

2023-03-09 15:44:28 -05:00

python_packages.yml

…

routes.yml

…

rpm_packages.yml

…

running_apps.yml

…

safari_extensions.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

screenlock.yml

Warning about installing extension on Chrome browsers (#12596)

2023-07-07 09:55:38 -07:00

secureboot.yml

…

shared_folders.yml

…

shared_resources.yml

…

sharing_preferences.yml

…

shell_history.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

shimcache.yml

…

signature.yml

…

sip_config.yml

…

smbios_tables.yml

…

smc_keys.yml

…

sntp_request.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

software_update.yml

CIS MAC 1.1 fix (#10619)

2023-03-29 09:24:33 -04:00

ssh_configs.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

startup_items.yml

…

sudo_info.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

sudoers.yml

…

suid_bin.yml

…

system_controls.yml

…

system_extensions.yml

…

system_info.yml

Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)

2024-03-27 08:17:28 -05:00

system_state.yml

Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)

2024-03-27 08:17:28 -05:00

temperature_sensors.yml

…

time_machine_backups.yml

…

time_machine_destinations.yml

…

time.yml

…

ulimit_info.yml

…

uptime.yml

…

usb_devices.yml

…

user_login_settings.yml

Add documentation for missing fleetd tables and regenerate JSON (#9960)

2023-02-22 16:05:36 -03:00

user_ssh_keys.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

userassist.yml

…

users.yml

Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)

2024-03-27 08:17:28 -05:00

virtual_memory_info.yml

…

vscode_extensions.yml

Update schema overrides to clarify which tables require joining against users (#18045)

2024-04-05 11:11:18 -05:00

wifi_networks.yml

Update wifi_networks.yml (#12488)

2023-06-26 10:51:09 -05:00

wifi_status.yml

…

wifi_survey.yml

…

windows_eventlog.yml

…

windows_firewall_rules.yml

…

windows_optional_features.yml

…

windows_updates.yml

Fix platform documentation for windows_updates table (#16071)

2024-01-11 15:26:59 -06:00

xprotect_entries.yml

…

xprotect_meta.yml

Fix build (#10018)

2023-02-22 13:00:45 -06:00

xprotect_reports.yml

Update xprotect_reports.yml (#12486)

2023-06-28 11:33:06 -07:00

yara.yml

…

yum_sources.yml

…