Commit graph

131 commits

Author SHA1 Message Date
Brock Walters
88e94b1c4f
Update authdb.yml (#19274)
Modified Description field.
2024-05-24 15:23:09 -04:00
Brock Walters
4545e960ae
Update arp_cache.yml (#19254)
Updates to Fleet Table Docs per
https://github.com/fleetdm/fleet/issues/16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-24 15:05:57 -04:00
Brock Walters
3f926e7569
Update authdb.yml (#19161)
Need help to get the correct formatting for the notes key/val

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2024-05-24 07:40:32 -04:00
Eric
9eb8508b30
Schema: Update version of osquery schema (#18890)
Changes:
- Updated the version of osquery schema that is merged with Fleet's
overrides: (5.11.0 » 5.12.1)
- Regenerated schema/osquery_fleet_schema.json
2024-05-13 16:52:01 -05:00
Victor Lyuboslavsky
c77dea8c2b
Schema documentation for new SOFA tables. (#18853)
#18832 
Schema documentation for new SOFA tables from macadmins extension.
2024-05-09 10:50:16 -05:00
Eric
85a8647700
Schema: Regenerate osquery_fleet_schema.json (#18781)
Closes: #18761

changes:
- Regenerated `schema/osquery_fleet_schema.json`
2024-05-06 16:42:00 -05:00
Brock Walters
a603304946
Update puppet_info.yml (#18687)
Fixed type in noop_pending key
2024-05-02 10:14:22 -04:00
Eric
5db04b937c
Regenerate osquery_fleet_schema.json (2024-04-30) (#18658)
Closes: #18600

Changes:
 - regenerated `schema/osquery_fleet_schema.json`
2024-04-30 16:55:01 -05:00
Rachael Shaw
895d4bc2f7
Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
JD
8eec8e5371
Update spelling & grammar in pwd_policy.yml (#18547)
Markdown updates to spelling and grammar.
2024-04-26 18:02:16 -05:00
Brock Walters
fb767c0541
Update falconctl_options.yml (#18536)
Fixed typo in "falconctl" string.
2024-04-25 11:41:51 -04:00
Eric
084ddb5dd8
Regenerate osquery_fleet_schema.json (2024-04-22) (#18476)
Closes: #18442
2024-04-22 18:10:10 -05:00
Eric
c2f333aebb
Schema: Update schema overrides to only use one YAML block scalar (#18351)
Closes: #18240

Changes:
- Updated the schema override files to use only one YAML block scalar
(`>-`)
- Updated the template yaml included in the link to create a new
override file in get-extended-osquery-schema helper to use the `>-`
block scalar
- regenerated osquery_fleet_schema.json
2024-04-16 18:35:23 -05:00
Victor Lyuboslavsky
a27634deb1
Updating orbit_info schema. (#18135)
#17148
#17361 

In orbit_info table, added the following fields:
- desktop_version
- scripts_enabled
2024-04-10 09:50:26 -05:00
Eric
d6036b181b
Schema: Remove unused and outdated schema/fleet_schema.json (#18092)
Changes:
- Deleted `schema/fleet_schema.json` (This file was previously used when
merging the osquery schema with Fleet's overrides before we switched to
using YAML override files).
- Updated the description of the `generate-merged-schema` script.
2024-04-05 17:13:32 -05:00
Eric
766d08e767
Schema: remove requires_user_context related code, regenerate schema json. (#18091)
Changes:
- Updated the `build-static-content` script to remove support for the
`requires_user_context` column attribute
- Updated `get-extended-osquery-schema` to not set a
`requires_user_context` value in the merged schema json.
- Regenerated `schema/osquery_fleet_schema.json`
2024-04-05 15:39:02 -05:00
Rachael Shaw
55df14a23e
Update schema overrides to clarify which tables require joining against users (#18045)
For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00
Zach Wasserman
e3deceeb6d
Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)
For #17577

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux. (performed only on macOS)
2024-04-03 09:13:04 -07:00
Eric
2ae85ac2c4
Website: update get-extended-osquery-schema helper to ensure all column types are lowercase. (#17931)
Closes: #17883

Changes:
- Updated the `get-extended-osquery-schema` helper to set the `type`
values of columns of tables with Fleet overrides to be lowercase.
- Regenerated `osquery_fleet_schema.json`
2024-04-01 12:05:42 -05:00
Eric
286d6f86eb
Update examples in osquery_fleet_schema.json (#17932)
Related to: https://github.com/fleetdm/fleet/issues/17861

Changes: 
- Updated `get-extended-osquery-schema` helper to remove `examples`
values from the merged schema JSON if they are an empty array.
- regenerated `osqeury_fleet_schema.json`
2024-03-29 19:41:13 -05:00
Eric
1f1f0ce4d0
Update Fleet schema overrides (string » text) & regenerate osquery_fleet_schema.json (#17884)
Changes:
- Updated the type of all override columns with `type:string` to
`type:text`
- Regenerated `osquery_fleet_schema.json`
2024-03-27 08:17:28 -05:00
Eric
a450bf2c58
Website: update get-extended-osquery-schema helper (#17190)
Closes: https://github.com/fleetdm/fleet/issues/17188

Changes:
- Updated `get-extended-osquery-schema.js` to only include the last
example from the osquery schema if a table has an override file that
does not contain an `examples` value.
- Regenerated osquery_fleet_schema.json with the correct `examples`
values
2024-03-01 12:48:06 -06:00
Eric
73a5d6ba99
Regenerate osquery_fleet_schema.json (2024-02-21) (#17063)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`
2024-02-21 15:58:33 -06:00
Mike McNeil
24a783b412
Update account_policy_data.yml (#16963)
.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-02-21 12:46:58 -06:00
Mike McNeil
775decf152
Update account_policy_data.yml (#16962)
... <!-- being naughty to save time -->
2024-02-19 12:48:03 -06:00
Eric
8878613277
Update vscode_extensions override file & regenerate merged schema (#16829)
Changes:
- Added a newline before the code block in the example of the
`vscode_extensions` table override to fix the formatting of the page
generated for this table (see screenshot)
- Ran the `generate-merged-schema` script to regenerate
`osquery_fleet_schema.json`
<img width="860" alt="image"
src="https://github.com/fleetdm/fleet/assets/7445991/1f6f1b37-1240-4d16-b102-f67ecff5fb28">
2024-02-14 13:40:50 -06:00
Noah Talerman
260fd225e8
fleetdm.com/tables: vscode_extensions (#16779)
- Add override file
- Add description
- Add example query
- Add note: Querying for VS Code extensions requires joining against the
`users` table.
- Add columns
2024-02-14 10:05:31 -05:00
Eric
98e825e434
Update osquery schema version, regenerate merged schema JSON (#16597)
For https://github.com/fleetdm/fleet/issues/13891

Changes:
- Updated the version of the osquery schema used to generate
osqeury_fleet_schema.json (`5.9.1` » `5.11.0`)
- Removed the table override file for the `atom_packages` table (It was
removed from the osquery schema, our override file was previously hiding
the table)
- Ran the `generate-merged-schema` script to regenerate
osquery_fleet_schema.json
2024-02-05 17:30:41 -06:00
Noah Talerman
558ef6497f
fleetdm.com/tables: Add Fleet override for process_file_events docs (#16503)
- To address the bug, we decided to document the current behavior: The
`process_file_events table` will only emit events for changes and files
in directories that existed before osquery starts.
2024-02-02 15:47:23 -05:00
Eric
b133e51a59
Regenerate osquery_fleet_schema.json (#16072)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`osquery_fleet_schema.json`
2024-01-11 15:34:08 -06:00
Rachael Shaw
7f7eafb54f
Fix platform documentation for windows_updates table (#16071)
Compatible with Windows (not macOS)
2024-01-11 15:26:59 -06:00
Lucas Manuel Rodriguez
bd16acb66e
Adding doc changes for configuring fleetd channels remotely (#15872)
#13825

Creating a separate PR to not block on docs review.
2024-01-04 10:23:51 -03:00
Eric
cda91571b8
2023-12-06 Regenerate osquery_fleet_schema.json (#15474)
Changes:
- Ran the `update-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`
2023-12-08 17:00:12 -06:00
Sharon Katz
29580a242d
15135 remove atom package (#15410) 2023-12-04 14:26:26 -05:00
Eric
597dafa187
(2023-11-17) Regenerate osquery_fleet_schema.json (#15189)
Changes:
- Regenerated `schema/osquery_fleet_schema.json`
2023-11-17 13:23:11 -06:00
Noah Talerman
ba8ae8797e
Add docs for new tables (#15046)
- Add documentation for new tables so that they show up on fleetdm.com
and the sidebar in the Fleet UI

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Jack-Daniyel Strong <jack@jdstrong.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-11-17 12:17:23 -06:00
Eric
bd68426b03
Update osquery table YAML template (#15078)
Changes:
- Added the `evented` attribute to the osquery schema table YAML
template in the `schema/` folder README.
2023-11-16 13:52:22 -06:00
Rachael Shaw
7be8419393
Fix typo in example query (#15097)
Fix typo in example query for user_ssh_keys table
2023-11-10 15:11:30 -06:00
Rachael Shaw
ae669e1749
2023-10-17 Update osquery schema version & regenerate merged schema (#14436)
When running a live query recently, I noticed some columns in the
results that we didn't have documented, and realized we weren't using
the latest osquery schema version when regenerating the merged schema.

According to the docs, [we support the latest version of
osquery](https://fleetdm.com/docs/using-fleet/enroll-hosts#supported-osquery-versions),
so figure we ought to update the schema version to the latest.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-26 18:04:23 -05:00
JD
d6456029b9
Adds attribution to MacAdmins osquery extension. (#14616)
Adds attribution to MacAdmins foundation osquery extension.
2023-10-20 06:57:04 -07:00
Eric
4bea8a4c92
Schema: update override column descriptions for system_info and chrome_extensions tables (#14395)
Related to: #14166

Changes:
- updated the override column descriptions for the `system_info` and
`chrome_extensions` tables to include the descriptions from the osquery
schema.
2023-10-10 13:10:49 -05:00
Eric
1d9299dea2
Regenerate osquery_fleet_schema.json (2023-09-26) (#14161)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`/schema/osquery_fleet_schema.json`
2023-09-27 16:29:58 -05:00
Eric
2de35a0ff7
Schema: Hide iptables table. (#14054)
Changes:
- Created an override file for the `iptables` table
- Regenerated merged schema.
2023-09-26 16:49:48 -05:00
Mo Zhu
1c7359b117
Update certificates.yml to include warning about potential corruption… (#13976)
Partially addresses #13065
2023-09-25 10:33:53 -07:00
Mo Zhu
2e09371aaf
Update keychain_items.yml to include warning about potential corruption of the certificate (#13975)
Partially addresses #13065
2023-09-25 10:33:30 -07:00
Eric
45e1b56bb1
Website: sort merged osquery schema (#13959)
Closes: #13722

Changes:
- Updated the `get-extended-osquery-schema` helper to sort the merged
schema by table name.
- Regenerated `/schema/osquery_fleet_schema.JSON`
2023-09-15 18:40:57 -05:00
Eric
51485beb40
Regenerate osquery_fleet_schema.json (#13723)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`.
2023-09-05 16:29:39 -05:00
Eric
08af35d294
Schema: Regenerate merged schema JSON (#13311)
Changes
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`.
2023-08-15 18:35:19 -05:00
JD
31a308c6ed
Update schema example for mounts table (#12779)
Noticed this had the wrong table example. Updated mounts table schema
example with an example from my PSU MacAdmins presentation.
2023-07-18 15:30:33 -07:00
Mike McNeil
92ccd71b87
Update npm_packages.yml (#12489)
Clarify docs for https://fleetdm.com/tables/npm_packages

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-07-14 16:27:18 -05:00