Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Initial implementations for BPF-based socket and process events tables
Linux
bpf
events
#6571
opened Jul 28, 2020 by
alessandrogario
•
Review required
Add `sigrules` to pass YARA signature with query
feature
#6568
opened Jul 27, 2020 by
kumarak
•
Changes requested
Add non-evented table for querying Windows Events Log
Windows
virtual tables
#6563
opened Jul 22, 2020 by
kumarak
•
Review required
Added systemD support to startup_items table
Linux
virtual tables
#6562
opened Jul 21, 2020 by
rcipkins
•
Review required
includes: Move osquery/include files into respective CMake targets
build
refactor
#6557
opened Jul 17, 2020 by
theopolis
•
Review required
Fix process_open_sockets type error on darwin
bug
macOS
virtual tables
#6546
opened Jul 7, 2020 by
directionless
•
Review required
Windows 32 bit Support
Windows
build
needs response
#6543
opened Jul 6, 2020 by
Breakwell
•
Review required
Add version comparison functions
SQL
do not merge
feature
#6535
opened Jul 1, 2020 by
directionless
•
Draft
Add --setns flag to run osqueryi in container namespace
feature
#6500
opened Jun 12, 2020 by
amalone-scwx
•
Review required
events: Implement EndpointSecurity (macOS 10.15) based process events table
events
feature
macOS
#6467
opened May 26, 2020 by
uptycs-sharvil
•
Changes requested
WIP: Add top-level decorations to status logs
feature
logging
needs response
#6424
opened Apr 28, 2020 by
nyanshak
•
Review required
Add AArch64 support on Linux
Linux
aarch64
do not merge
merge with rebase
#6336
opened Mar 28, 2020 by
alessandrogario
•
Review required
process_dns_events: Implement BPF-based getaddrinfo tracer
Linux
bpf
libraries
#6254
opened Feb 19, 2020 by
alessandrogario
•
Draft
Port the extended_attributes table to Linux, add support for Linux capabilities
Linux
virtual tables
#6195
opened Jan 22, 2020 by
alessandrogario
•
Review required
Update SQL For getDriverImagePath
Windows
help needed
needs response
virtual tables
#6059
opened Nov 19, 2019 by
eoinmiller-r7
•
Review required
0 of 6
Fix documentation typos, Markdown format, and (a few) inaccuracies
documentation
needs response
#5789
opened Sep 10, 2019 by
mike-myers-tob
•
Review required
detect encryption of ed25519 ssh keys
feature
needs response
virtual tables
#5526
opened Mar 14, 2019 by
ostrowr
•
Changes requested
Fix BIOS Info table searching.
Windows
bug
needs response
virtual tables
#5246
opened Oct 5, 2018 by
sbrito85
•
Review required
[WIP] apparmor_events table in osquery
Linux
cla signed
events
virtual tables
#4982
opened Aug 17, 2018 by
luc-lynx
•
Changes requested
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.