mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
Adds the following queries to the Standard query library: - Get authorized keys for Local Accounts - Get authorized keys for Domain Joined Accounts - Get current users with active shell/console on the system - Get Disk encryption status - Detect Unencrypted SSH Keys for Local Accounts - Detect Unencrypted SSH Keys for Domain Joined Accounts - Line parsed values from system and user cron/tab - Detect Dynamic Linker Hijacking (MITRE. T1574.006) - Get etc hosts entries - Get Network Interfaces - Get Local User Accounts - Detect active user accounts on servers - Detect Nmap Scanner - Get docker images on a system - Get docker running containers on a system - Get docker running process on a system |
||
|---|---|---|
| .. | ||
| 1-Using-Fleet | ||
| 2-Orbit-osquery | ||
| 3-Deployment | ||
| 4-Contribution | ||
| images | ||
| README.md | ||
Fleet Documentation
Welcome to the documentation for the Fleet osquery fleet manager.
Using Fleet
Resources for using the Fleet UI, fleetctl CLI, and Fleet REST API.
Orbit osquery
Resources for using Orbit for osquery: the recommended agent for Fleet.
Deployment
Resources for installing Fleet's infrastructure dependencies, configuring Fleet, deploying osquery to hosts, and viewing example deployment scenarios.
Contribution
If you're interested in interacting with the Fleet source code, you'll find information on modifying and building the code here.
If you have any questions, please don't hesitate to File a GitHub issue or join us on Slack. You can find us in the #fleet channel.