osquery/osquery issues and pull requests

#8053 - Adding Hidden LaunchAgent/Daemon Discovery

Pull Request - State: open - Opened by calhall over 1 year ago - 1 comment
Labels: virtual tables, macOS

#8052 - Update linux `disk_encryption` to recursively query parent crypt status

Pull Request - State: open - Opened by Micah-Kolide over 1 year ago - 1 comment
Labels: bug, virtual tables, Linux, ready for review

#8049 - Library libarchive has vulnerability CVE-2023-30571

Issue - State: closed - Opened by github-actions[bot] over 1 year ago - 1 comment
Labels: libraries, security, cve, severity-medium

#8040 - [virtual tables] Build `cpu_time` table for Windows

Pull Request - State: open - Opened by yux-m over 1 year ago - 4 comments
Labels: virtual tables, Windows

#8039 - Osquery syslog logger plugin writes logs under incorrect syslog app-name in some cases

Issue - State: open - Opened by macEar over 1 year ago - 2 comments

#8037 - Add some indexing to `block_devices`

Pull Request - State: open - Opened by directionless over 1 year ago
Labels: macOS, Linux, ready for review, performance

#8032 - Custom path does not work for windows installer

Issue - State: open - Opened by bbkchdhry over 1 year ago

#8025 - Do not consider a 404 as an error in ec2-instance-metadata

Pull Request - State: open - Opened by Smjert over 1 year ago
Labels: AWS

#8024 - OsQuery returns partial result when using OR containing LIKE operator

Issue - State: open - Opened by lszcs90 over 1 year ago - 1 comment

#8023 - cve: Update libxml2 to v2.11.2

Pull Request - State: open - Opened by Smjert over 1 year ago
Labels: libraries, security, cve

#8022 - osquery can deadlock when running a query against `osquery_schedule` immediately on startup

Issue - State: open - Opened by Samuel-Roach over 1 year ago
Labels: bug, core

#8021 - Connection timeout not honored in curl_certificate table queries

Issue - State: open - Opened by marcosd4h over 1 year ago
Labels: bug, virtual tables, Linux, triage

#8020 - Mark time column as "additional" for event tables

Pull Request - State: open - Opened by bgirardeau-figma over 1 year ago

#8019 - unified_log: add predicate column and optimize timestamp constraint

Pull Request - State: open - Opened by bgirardeau-figma over 1 year ago
Labels: macOS, API change

#8018 - fixed

Issue - State: closed - Opened by krishanbhagat over 1 year ago - 1 comment

#8017 - osqueryd result build-ups on macOS causing network traffic build-up

Issue - State: open - Opened by ghambissa-li over 1 year ago - 5 comments

#8016 - osqueryd result build-ups on macOS causing network traffic build-up

Issue - State: closed - Opened by asterisk800 over 1 year ago

#8015 - Cannot query the tables via the osquery-go SDK

Issue - State: closed - Opened by talk2sohail almost 2 years ago - 1 comment
Labels: triage, extensions, SDK

#8014 - Use `ComPtr<>` from the MS WRL library

Pull Request - State: open - Opened by dreamer-dead almost 2 years ago - 8 comments
Labels: ready for review, Windows, refactor

#8013 - Library libxml2 has vulnerability CVE-2023-29469

Issue - State: open - Opened by github-actions[bot] almost 2 years ago
Labels: libraries, security, cve, severity-medium

#8012 - Library libxml2 has vulnerability CVE-2023-28484

Issue - State: open - Opened by github-actions[bot] almost 2 years ago
Labels: libraries, security, cve, severity-medium

#8011 - Add Apple RSR fields to `os_version` using native API

Pull Request - State: open - Opened by jbeker almost 2 years ago - 3 comments
Labels: virtual tables, macOS

#8010 - Add `os_version` support for Apple RSR patches

Pull Request - State: open - Opened by uptycs-brian almost 2 years ago - 2 comments
Labels: virtual tables, macOS

#8009 - Apple Platform SSO might have broken `logged_in_users`

Issue - State: open - Opened by directionless almost 2 years ago
Labels: virtual tables, macOS

#8008 - `os_version` does not display Apple's new Rapid Security Response information

Issue - State: open - Opened by directionless almost 2 years ago - 11 comments
Labels: bug, virtual tables, macOS

#8007 - `osquery_schedule` not updating most statistics

Issue - State: open - Opened by harlan-B almost 2 years ago - 7 comments
Labels: bug, virtual tables, Linux, triage

#8006 - Update Windows on ARM to a patched version of openssl 1.1.1t

Issue - State: closed - Opened by Smjert almost 2 years ago - 1 comment
Labels: libraries, Windows on ARM

#8005 - Add basic implementation for ComPtr<> scoped class and simple tests

Pull Request - State: closed - Opened by dreamer-dead almost 2 years ago - 3 comments
Labels: Windows, development

#8004 - Introduce Bstr scoped guard class to manage BSTR string type

Pull Request - State: open - Opened by dreamer-dead almost 2 years ago
Labels: ready for review, Windows, refactor, development

#8003 - RAII for managing various objects in codebase

Issue - State: open - Opened by dreamer-dead almost 2 years ago - 4 comments
Labels: Windows, blueprint, core

#8002 - Include missing data about key types in `keychain_items`

Pull Request - State: open - Opened by bgirardeau-figma almost 2 years ago
Labels: virtual tables, macOS

#8001 - Return appinstaller packages in a query of `programs`

Issue - State: open - Opened by kkirklandjc almost 2 years ago - 2 comments
Labels: bug, virtual tables, Windows

#8000 - Do not pass wstring::c_str() to wstringToString function

Pull Request - State: closed - Opened by dreamer-dead almost 2 years ago
Labels: Windows

#7999 - Release objects and free memory obtained from COM

Pull Request - State: closed - Opened by dreamer-dead almost 2 years ago
Labels: Windows

#7998 - osqueryi returns error when executing query with quotes in interactive mode

Issue - State: closed - Opened by lszcs90 almost 2 years ago - 4 comments

#7997 - Do not copy string content if possible while base64 encoding/decoding

Pull Request - State: open - Opened by dreamer-dead almost 2 years ago - 1 comment
Labels: virtual tables, ready for review, refactor

#7996 - libs: Bring out LZ4 from rdkafka and update it to v1.9.4

Pull Request - State: closed - Opened by Smjert almost 2 years ago
Labels: libraries

#7995 - Simplify `hashMultiFromFile` function

Pull Request - State: open - Opened by dreamer-dead almost 2 years ago
Labels: ready for review, refactor

#7994 - Failed to start service when osquery(5.8.2) is installed in custom location other than C:\Program Files\osquery

Issue - State: open - Opened by SAURABHS1993 almost 2 years ago

#7993 - Add few unit tests for the hashing component

Pull Request - State: closed - Opened by dreamer-dead almost 2 years ago

#7992 - Add a Linux Devcontainer for osquery developers

Pull Request - State: open - Opened by NickBorgers almost 2 years ago - 4 comments
Labels: Linux, development

#7991 - Extract metainformation from sandboxed Safari extensions

Pull Request - State: open - Opened by marcosd4h almost 2 years ago - 1 comment
Labels: virtual tables, macOS

#7990 - Add `windows_search` table

Pull Request - State: open - Opened by James-Pickett almost 2 years ago - 6 comments
Labels: virtual tables, Windows

#7989 - I would really like some queries to run at (or near) startup

Issue - State: open - Opened by directionless almost 2 years ago
Labels: query-scheduler, blueprint, core

#7988 - It would be neat if the scheduler could work off wall clock time, and not uptime

Issue - State: open - Opened by directionless almost 2 years ago - 1 comment
Labels: query-scheduler, blueprint, core

#7987 - Migrate openssl from 1.1.1 to 3.x

Issue - State: closed - Opened by Smjert almost 2 years ago - 1 comment
Labels: libraries, security

#7986 - CHANGELOG 5.8.2

Pull Request - State: closed - Opened by directionless almost 2 years ago

#7985 - Process activity: missing data

Issue - State: open - Opened by juju4 almost 2 years ago
Labels: bug, Linux, events, triage

#7984 - ci: Update aarch64 runner to Ubuntu 20.04 and update badges

Pull Request - State: closed - Opened by Smjert almost 2 years ago - 1 comment
Labels: documentation, CI/CD

#7983 - "Package payload is not signed" on SLES12 SP5

Issue - State: closed - Opened by thomas-merz almost 2 years ago - 10 comments
Labels: Linux, packaging

#7982 - Library openssl has vulnerability CVE-2023-0466

Issue - State: open - Opened by github-actions[bot] almost 2 years ago
Labels: libraries, security, cve, severity-medium

#7981 - Library openssl has vulnerability CVE-2023-0465

Issue - State: open - Opened by github-actions[bot] almost 2 years ago
Labels: libraries, security, cve, severity-medium

#7980 - Add ability to query physical disk metadata

Issue - State: open - Opened by Na-ru-to4170 almost 2 years ago - 2 comments
Labels: feature, Linux, wishlist

#7979 - Update `leveldb` to version 1.23

Issue - State: closed - Opened by nick-yangZ almost 2 years ago - 2 comments
Labels: libraries

#7978 - Update es_process_file_events.table description

Pull Request - State: closed - Opened by zwass almost 2 years ago
Labels: documentation

#7977 - OSquery not listed in Programs and features on Windows Server 2022 for other users

Issue - State: open - Opened by janrc almost 2 years ago

#7976 - `cpu_info` table returns no results on Google Compute Engine

Issue - State: open - Opened by Rylon almost 2 years ago - 1 comment

#7975 - Library openssl has vulnerability CVE-2023-0464

Issue - State: open - Opened by github-actions[bot] almost 2 years ago
Labels: libraries, security, severity-high, cve

#7974 - Improving `listDirectoriesInDirectory` by using `std::fs`

Pull Request - State: open - Opened by marcosd4h almost 2 years ago - 9 comments
Labels: performance

#7973 - How to check whether 2FA or MFA is enabled, using osquery

Issue - State: open - Opened by Niba-nazar almost 2 years ago - 1 comment
Labels: question

#7972 - osqueryi returns 'incomplete SQL:' error when query is taken from pipe

Issue - State: open - Opened by lszcs90 almost 2 years ago

#7971 - ec2_instance_metadata fails when macOS is not in EC2

Issue - State: closed - Opened by alexb2539 almost 2 years ago - 2 comments

#7970 - Incorrect link

Issue - State: open - Opened by albert-github almost 2 years ago

#7969 - ci: Update python version and docs build tools

Pull Request - State: closed - Opened by Smjert almost 2 years ago - 1 comment
Labels: documentation, CI/CD

#7968 - CI: Always build

Pull Request - State: closed - Opened by Smjert almost 2 years ago - 1 comment

#7967 - test: Do not always expect a row from the secureboot table

Pull Request - State: closed - Opened by Smjert almost 2 years ago - 1 comment
Labels: test

#7966 - tests: Do not always build root tests on Linux

Pull Request - State: closed - Opened by Smjert almost 2 years ago
Labels: build, Linux, test

#7965 - test: Fix SystemdUnitsTest missing the unit_file_state column

Pull Request - State: closed - Opened by Smjert almost 2 years ago
Labels: test

#7964 - tests: Fix some tests becoming osquery shells

Pull Request - State: closed - Opened by Smjert almost 2 years ago
Labels: build, test

#7963 - Fix COM security initialization by setting COM security per interface level

Pull Request - State: closed - Opened by marcosd4h almost 2 years ago
Labels: bug, Windows

#7962 - COM security initialization made in WmiRequest::CreateWmiRequest fails if CoInitializeSecurity was already called

Issue - State: closed - Opened by marcosd4h almost 2 years ago

GitHub / osquery/osquery issues and pull requests