osquery

Nov 21, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Nov 19, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Nov 13, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 25, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 21, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 17, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 16, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 16, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 15, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 11, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Sep 12, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Sep 6, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Sep 3, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Aug 16, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Aug 1, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 30, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 18, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 17, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 16, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 15, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jul 9, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jun 20, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jun 20, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jun 10, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jun 7, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Jun 3, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

May 23, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

May 16, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

May 2, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Apr 10, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Apr 4, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Mar 12, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Mar 7, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Feb 14, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Feb 9, 2024 GO-2024-3308

  GO-2024-3308: Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) in github.com/kolide/launcher

Oct 18, 2019

Changes in this version

+ const ServerProvidedDataBucket

+ func ConfigFromDB(db *bolt.DB) (string, error)

+ func IdentifierFromDB(db *bolt.DB) (string, error)

+ func NodeKeyFromDB(db *bolt.DB) (string, error)

+ type Decorators struct

+ Always []string

+ Interval map[string][]string

+ Load []string

+ type DiffResults struct

+ Added Rows

+ Removed Rows

+ type Extension struct

+ NodeKey string

+ Opts ExtensionOpts

+ func NewExtension(client service.KolideService, db *bolt.DB, opts ExtensionOpts) (*Extension, error)

+ func (e *Extension) Enroll(ctx context.Context) (string, bool, error)

+ func (e *Extension) GenerateConfigs(ctx context.Context) (map[string]string, error)

+ func (e *Extension) GetQueries(ctx context.Context) (*distributed.GetQueriesResult, error)

+ func (e *Extension) LogString(ctx context.Context, typ logger.LogType, logText string) error

+ func (e *Extension) RequireReenroll(ctx context.Context)

+ func (e *Extension) SetQuerier(client Querier)

+ func (e *Extension) Shutdown()

+ func (e *Extension) Start()

+ func (e *Extension) WriteResults(ctx context.Context, results []distributed.Result) error

+ type ExtensionOpts struct

+ Clock clock.Clock

+ EnrollSecret string

+ Logger log.Logger

+ LoggingInterval time.Duration

+ MaxBufferedLogs int

+ MaxBytesPerBatch int

+ RunDifferentialQueriesImmediately bool

+ type OsqueryConfig struct

+ Decorators Decorators

+ Options map[string]interface{}

+ Packs Packs

+ type OsqueryDistributedQueryResults map[string][]map[string]string

+ type OsqueryPlatform string

+ const Darwin

+ const Linux

+ const Unknown

+ const Windows

+ func DetectPlatform() (OsqueryPlatform, error)

+ type OsqueryResultLog struct

+ Action string

+ CalendarTime string

+ Columns map[string]string

+ Counter int

+ Decorations map[string]string

+ DiffResults *DiffResults

+ Epoch int

+ HostIdentifier string

+ Name string

+ Snapshot []map[string]string

+ UnixTime int

+ type OsqueryStatusLog struct

+ Decorations map[string]string

+ Filename string

+ Line string

+ Message string

+ Severity string

+ Version string

+ type PackContent struct

+ Discovery []string

+ Platform string

+ Queries Queries

+ Shard uint

+ Version string

+ type Packs map[string]PackContent

+ type Querier interface

+ Query func(sql string) ([]map[string]string, error)

+ type Queries map[string]QueryContent

+ type QueryContent struct

+ Description string

+ Interval uint

+ Platform *string

+ Query string

+ Removed *bool

+ Shard *uint

+ Snapshot *bool

+ Version *string

+ type Rows []map[string]string