Commit graph

8 commits

Author SHA1 Message Date
gillespi314
676f3f0bd5
Query library improvements -- Round 2 (#973)
-Modify build-static-content back-end script to implement GitHub Users API and build contributor profile information into query library pages
-Remove related functionality from client-side page scripts
-Add dropdown menu to select filters
-Refine html and css
2021-06-10 12:57:37 -05:00
Mike McNeil
8b04c0c634
make example work from root dir of repo 2021-06-04 01:35:59 -05:00
Mike McNeil
7bb202f961
Publish fleetdm.com/queries (#899)
* /sandbox/queries becomes /queries, etc

* Publish fleetdm.com/queries

Expose query library routes the rest of the way, move remediation data sanitization to the point of entry, and update query library to match (pairing w/ @gillespi314)

* Fix accidental commit of sailsrc (again)
2021-05-28 17:51:47 -05:00
Mike McNeil
1512089384
add contributors to a query 2021-05-28 16:46:33 -05:00
Mike McNeil
6330b1ddc3
remove duplicate from standard query library
This will be prevented in the future by https://github.com/fleetdm/fleet/pull/827/files#diff-f6ef0e28b3715762f83a980eaadda37aec5c7ffe9ef9b19d303f53def956b98bR36
(which is how this got noticed )
2021-05-21 04:18:22 -05:00
Ahmed Elshaer
e18f154710
Add queries to Standard Query Library (#771)
Adds the following queries to the Standard query library:
- Get authorized keys for Local Accounts
- Get authorized keys for Domain Joined Accounts
- Get current users with active shell/console on the system
- Get Disk encryption status
- Detect Unencrypted SSH Keys for Local Accounts
- Detect Unencrypted SSH Keys for Domain Joined Accounts
- Line parsed values from system and user cron/tab
- Detect Dynamic Linker Hijacking (MITRE. T1574.006)
- Get etc hosts entries
- Get Network Interfaces
- Get Local User Accounts
- Detect active user accounts on servers
- Detect Nmap Scanner
- Get docker images on a system
- Get docker running containers on a system
- Get docker running process on a system
2021-05-19 11:21:45 -07:00
Mike McNeil
cc018bcfa6
Add "contributors" to YAML format to enable attribution (#780) 2021-05-18 10:33:40 -05:00
noahtalerman
7d9ca2cee7
Convert standard query library to YAML format (#749)
- Create `/configuration-files/` directory inside of `/1-Using-Fleet` directory. This directory contains example Fleet configuration files in yaml format. Replaces the `/examples` directory.
- Create `/standard-query-library/` directory inside of `/1-Using-Fleet` directory. This directory contains the new `standard-query-library.yml`. This file will act as the source of community contributions to the standard query library.
- Edit references to `/examples` directory
2021-05-14 13:38:33 -04:00