Lucas Rodriguez
08/02/2022, 10:00 PMAndre Pinter
08/29/2022, 6:22 PMdiff --git a/osquery/tables/forensic/carves.cpp b/osquery/tables/forensic/carves.cpp
index 1fcdb25af..80929ad13 100644
--- a/osquery/tables/forensic/carves.cpp
+++ b/osquery/tables/forensic/carves.cpp
@@ -53,8 +53,10 @@ void enumerateCarves(QueryData& results, const std::string& new_guid) {
r["time"] = INTEGER(tree.doc()["time"].GetUint64());
}
- if (tree.doc().HasMember("size")) {
+ if (tree.doc().HasMember("size") && tree.doc()["size"].IsInt()) {
r["size"] = INTEGER(tree.doc()["size"].GetInt());
+ } else if (tree.doc().HasMember("size") && tree.doc()["size"].IsString()) {
+ r["size"] = INTEGER(tree.doc()["size"].GetString());
}
stringToRow("sha256", r, tree);
From reading more of the codebase and the database code it seems like there's some friction where the update functions only take strings and then it seems its up to casts elsewhere in the codebase to turn them into the right typesMike Myers
08/30/2022, 5:50 AMMike Myers
08/30/2022, 5:52 AMLucas Rodriguez
09/06/2022, 10:37 PMMike Myers
09/16/2022, 4:44 PMMike Myers
09/26/2022, 4:08 PMArtemis Tosini
09/29/2022, 4:10 PMLucas Rodriguez
10/19/2022, 6:54 PMBrad Girardeau
10/28/2022, 2:52 AMStefano Bonicatti
11/10/2022, 12:45 PMzwass
zwass
zwass
zwass
zwass
Artemis Tosini
12/08/2022, 10:07 PMzwass
zwass
Lucas Rodriguez
03/17/2023, 7:42 PMJames Pickett
04/14/2023, 6:00 PMwindows_search
table that lets users query windows using CCommand via osquery. This is my first attempt at contributing to osquery and my first real foray into C++. Would love some preliminary feedback, just to validate my approach and ensure my code is in the ball park in terms of quality.zwass
Lucas Rodriguez
07/06/2023, 5:40 PMseph
Anton Kuchin
07/12/2023, 4:43 PMEventSubscriberPlugin::generateRows
(issue #8076)
Would appreciate your comments.seph
Evgeny Sidorov
07/21/2023, 9:59 AMnp5
08/02/2023, 3:05 PMJosh Hartwell
08/28/2023, 11:02 PMDaniel Iziourov
09/20/2023, 7:14 PM