From d28ff67b4f5f97d1cd7eeef50af315bb4fd4bd3a Mon Sep 17 00:00:00 2001 From: Dmitry Ng <19asdek91@gmail.com> Date: Wed, 24 May 2023 16:57:04 +0300 Subject: [PATCH] feat: added osquery_linux to the target build --- Dockerfile | 1 + config.json | 39 +++++++++++++++++++++++ docker-compose.yaml => docker-compose.yml | 0 3 files changed, 40 insertions(+) rename docker-compose.yaml => docker-compose.yml (100%) diff --git a/Dockerfile b/Dockerfile index acb0e1b..acd578e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,6 +30,7 @@ COPY correlator_linux /opt/vxmodules/mon/correlator_linux COPY yara_scanner /opt/vxmodules/mon/yara_scanner COPY lua_interpreter /opt/vxmodules/mon/lua_interpreter COPY osquery /opt/vxmodules/mon/osquery +COPY osquery_linux /opt/vxmodules/mon/osquery_linux COPY shell /opt/vxmodules/mon/shell COPY utils /opt/vxmodules/mon/utils COPY config.json /opt/vxmodules/mon/ diff --git a/config.json b/config.json index a2e4274..76291d7 100644 --- a/config.json +++ b/config.json @@ -619,5 +619,44 @@ ], "last_module_update": "2022-12-27 00:00:00", "last_update": "2022-12-27 00:00:00" + }, + { + "group_id": "", + "policy_id": "", + "state": "release", + "template": "empty", + "os": { + "linux": [ + "386", + "amd64" + ] + }, + "name": "osquery_linux", + "version": { + "major": 1, + "minor": 0, + "patch": 0 + }, + "actions": [], + "events": [ + "osquery_linux_already_installed", + "osquery_linux_already_started", + "osquery_linux_config_updated_error", + "osquery_linux_config_updated_success", + "osquery_linux_installed_error", + "osquery_linux_installed_success", + "osquery_linux_started_error", + "osquery_linux_started_success", + "osquery_linux_unexpected_stopped", + "osquery_linux_unexpected_uninstalled", + "osquery_linux_uninstalled_error", + "osquery_linux_uninstalled_success" + ], + "fields": [ + "reason", + "version" + ], + "last_module_update": "2022-12-27 00:00:00", + "last_update": "2022-12-27 00:00:00" } ] \ No newline at end of file diff --git a/docker-compose.yaml b/docker-compose.yml similarity index 100% rename from docker-compose.yaml rename to docker-compose.yml