Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 00:49:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 106

Adding a query for default handlers (#7924)

Browse source 
* Adding a query

* Update standard-query-library.yml

Thanks @brunerd and @brockwalters!

* Update standard-query-library.yml

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
This commit is contained in:
Guillaume Ross 2022-11-09 15:01:04 -05:00 committed by GitHub
parent d04d65d725
commit 4af331ac40
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
docs/01-Using-Fleet/standard-query-library/standard-query-library.yml
View file

@ -910,6 +910,18 @@ spec:
contributors: nabilschear
---
apiVersion: v1
kind: query
spec:
name: Identify the default mail, http and ftp applications
platforms: macOS
platform: darwin
description: Lists the currently enabled applications configured to handle mailto, http and ftp schemes.
query: SELECT * FROM app_schemes WHERE (scheme='mailto' OR scheme='http' OR scheme='ftp') AND enabled='1';
purpose: Informational
tags: compliance, hunting
contributors: brunerd
---
apiVersion: v1
kind: policy
spec:
name: Firewall enabled, domain profile (Windows)
@ -1003,3 +1015,4 @@ spec:
tags: compliance, inventory, built-in
platform: darwin
contributors: GuillaumeRoss