Update 4.45.0 release article (#19257)

- Credit @grahamgilbert and
[macadmins/osquery-extension](https://github.com/macadmins/osquery-extension)

Thank you for your awesome work Graham
This commit is contained in:
Noah Talerman 2024-05-24 10:26:19 -04:00 committed by GitHub
parent b7aac2cfab
commit d81ffdb5db
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -28,7 +28,7 @@ This improvement enhances the user experience for administrators and end-users b
## Mac Admins SOFA support
Fleet has integrated support for the Mac Admins [SOFA](https://github.com/macadmins/sofa) (Structured Open Feed Aggregator), enhancing its capabilities to provide comprehensive tracking and surfacing of update information for macOS hosts. SOFA, known for its machine-readable feed and user-friendly web interface, offers continuous updates on XProtect data, OS updates, and detailed release information. This integration within Fleet is facilitated through new tables specifically for security release information ([`sofa_security_release_info`](https://fleetdm.com/tables/sofa_security_release_info)) and unpatched CVEs ([`sofa_unpatched_cves`](https://fleetdm.com/tables/sofa_unpatched_cves)).
Fleet has integrated support for the Mac Admins [SOFA](https://github.com/macadmins/sofa) (Structured Open Feed Aggregator), enhancing its capabilities to provide comprehensive tracking and surfacing of update information for macOS hosts. SOFA, known for its machine-readable feed and user-friendly web interface, offers continuous updates on XProtect data, OS updates, and detailed release information. This integration within Fleet is facilitated through Graham Gilbert's recent updates to the [Mac Admins osquery extension](https://github.com/macadmins/osquery-extension), which includes tables specifically for security release information ([`sofa_security_release_info`](https://fleetdm.com/tables/sofa_security_release_info)) and unpatched CVEs ([`sofa_unpatched_cves`](https://fleetdm.com/tables/sofa_unpatched_cves)).
These additions provide Fleet users with valuable tools for monitoring security updates and vulnerability statuses directly within the Fleet environment. Users can access the new SOFA tables at [SOFA Security Release Info](https://fleetdm.com/tables/sofa_security_release_info) and [SOFA Unpatched CVEs](https://fleetdm.com/tables/sofa_unpatched_cves) for detailed insights. For those looking to delve deeper into the application of these tools, Graham Gilberts blog post, [Investigating unpatched CVEs with osquery and SOFA](https://grahamgilbert.com/blog/2024/05/03/investigating-unpatched-cves-with-osquery-and-sofa/), offers an in-depth look at leveraging osquery in conjunction with SOFA to enhance digital security and compliance efforts. This integration underscores Fleet's commitment to providing robust, actionable intelligence for IT administrators and security professionals managing Apple devices.