Eric
02437a098e
Schema: change default block scalar used in schema override files ( #19296 )
...
Closes : #19271
Closes : #19286
Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00
Rachael Shaw
55df14a23e
Update schema overrides to clarify which tables require joining against users ( #18045 )
...
For #16784 .
These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`
---------
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00
Mike McNeil
bf1c894e7d
Hide browser_plugins table ( #8669 )
...
It is not supported in most modern browsers and we think it is more osquerious-user-confusing than it is potentially security-helpful .
2022-12-07 08:23:20 -06:00
Eric
e82962e4a7
Add Fleet override schema files ( #8278 )
...
* create schema/tables, add yaml schema tables
* Update osquery-table-details.ejs
* Generate schema from schema/tables/ folder
* Create generate-yaml-tables-from-json.js
* update created table files
* update fleet override validation
* update error messages, add fleetRepoUrl
* Delete generate-yaml-tables-from-json.js
* Update osquery-table-details.ejs
* Update whitespace in table examples
* Revert "Update osquery-table-details.ejs"
This reverts commit 2e9d63208f .
* add YAML tables generated from updated Fleet schema
* lint fixes
* update arp_cache and docker_containers tables
2022-10-18 14:13:42 -05:00