mirror of
https://github.com/vxcontrol/soldr-modules.git
synced 2026-07-18 18:44:30 -04:00
[PR #39] [MERGED] add module osquery_linux v1.0.0 #40
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/vxcontrol/soldr-modules/pull/39
Author: @0legovich
Created: 1/9/2023
Status: ✅ Merged
Merged: 5/24/2023
Merged by: @asdek
Base:
master← Head:osquery_linux📝 Commits (1)
5aab1e1add module osquery_linux v1.0.0📊 Changes
28 files changed (+2135 additions, -0 deletions)
View changed files
➕
docker-compose.yaml(+12 -0)➕
osquery_linux/1.0.0/bmodule/main.vue(+35 -0)➕
osquery_linux/1.0.0/cmodule/args.json(+3 -0)➕
osquery_linux/1.0.0/cmodule/data/binaries/deb/osquery.deb(+0 -0)➕
osquery_linux/1.0.0/cmodule/data/binaries/rpm/osquery.rpm(+0 -0)➕
osquery_linux/1.0.0/cmodule/helpers.lua(+226 -0)➕
osquery_linux/1.0.0/cmodule/main.lua(+298 -0)➕
osquery_linux/1.0.0/cmodule/osquery.lua(+166 -0)➕
osquery_linux/1.0.0/config/action_config_schema.json(+6 -0)➕
osquery_linux/1.0.0/config/changelog.json(+14 -0)➕
osquery_linux/1.0.0/config/config_schema.json(+31 -0)➕
osquery_linux/1.0.0/config/current_action_config.json(+1 -0)➕
osquery_linux/1.0.0/config/current_config.json(+4 -0)➕
osquery_linux/1.0.0/config/current_event_config.json(+179 -0)➕
osquery_linux/1.0.0/config/default_action_config.json(+1 -0)➕
osquery_linux/1.0.0/config/default_config.json(+4 -0)➕
osquery_linux/1.0.0/config/default_event_config.json(+179 -0)➕
osquery_linux/1.0.0/config/dynamic_dependencies.json(+1 -0)➕
osquery_linux/1.0.0/config/event_config_schema.json(+386 -0)➕
osquery_linux/1.0.0/config/fields_schema.json(+23 -0)...and 8 more files
📄 Description
Description of the Change
The module installs and configures osquery. Os query is installed from the deb or rpm package, respectively. The module will reinstall osqeury if it is already installed in a different version. The module will overwrite the config if it is implied in the module settings.
Closes https://github.com/vxcontrol/soldr-modules/issues/13
How to test the Change
Changelog Entry
Base functionality
Added installation and configure osquery on agent for linux OS
Checklist:
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.