John Murphy
d5f9fcaeb2
This PR adds support for file integrity monitoring. This is done by providing a simplified API that can be used to PATCH/GET FIM configurations. There is also code to build the FIM configuration to send back to osquery. Each PATCH request, if successful, replaces Fleet's existing FIM configuration. For example: curl -X "PATCH" "https://localhost:8080/api/v1/kolide/fim" \ -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uX2tleSI6IkVhaFhvZWswMGtWSEdaTTNCWndIMnhpYWxkNWZpcVFDR2hEcW1HK2UySmRNOGVFVE1DeTNTaUlFWmhZNUxhdW1ueFZDV2JiR1Bwdm5TKzdyK3NJUzNnPT0ifQ.SDCHAUA1vTuWGjXtcQds2GZLM27HAAiOUhR4WvgvTNY" \ -H "Content-Type: application/json; charset=utf-8" \ -d $'{ "interval": 500, "file_paths": { "etc": [ "/etc/%%" ], "users": [ "/Users/%/Library/%%", "/Users/%/Documents/%%" ], "usr": [ "/usr/bin/%%" ] } }'
Kolide Fleet 
Effective Endpoint Security. At Any Scale.
Kolide Fleet is a state of the art host monitoring platform tailored for security experts. Leveraging Facebook's battle-tested osquery project, Kolide delivers fast answers to big questions. To learn more about the Kolide product, visit https://kolide.co/product.
Documentation for Kolide can be found at https://docs.kolide.co.
- Information about using the Kolide web application can be found in the Application Documentation.
- Resources for deploying osquery to hosts, deploying the Kolide server, installing Kolide's infrastructure dependencies, etc. can all be found in the Infrastructure Documentation.
- If you are interested in accessing the Kolide REST API in order to programmatically interact with your osquery installation, please see the API Documentation.
- Finally, if you're interested in interacting with the Kolide source code, you will find information on modifying and building the code in the Development Documentation.
If you have any questions, please don't hesitate to reach out to support@kolide.co.
About Kolide
Our philosophy is to enable everyone to defend themselves against cyber threats of increasing sophistication. We accomplish this by codifying our expertise in products that improve the utility and effectiveness of open-source security software and encourage trustworthy, community-supported detection and response.
