oriol
07/18/2018, 9:43 AMalessandrogario
08/14/2018, 6:18 PMalessandrogario
09/07/2018, 9:25 AMalessandrogario
11/21/2018, 6:16 PMalessandrogario
11/29/2018, 4:37 PMjgshomo
01/17/2019, 4:23 PMYehonatanShami
05/01/2019, 10:56 AMOmer Nizri
05/27/2019, 3:11 PMalessandrogario
06/14/2019, 11:52 PMvaar
07/11/2019, 3:22 PMMike Myers
08/21/2019, 8:18 PM--extensions_autoload=\path\to\extensions.load
argument to osqueryd
?Arvind D
08/22/2019, 1:56 PMnet
. but the new osqueryd cannot get the LOCK since it is held by the zombie osqueryd...if I kill the zombie process I see that the LOCK file still exist...this is the problem I am trying to solve.bao
09/03/2019, 4:29 PMtearDown()
and destructors not being called when exiting osqueryi or osqueryd?alessandrogario
09/08/2019, 7:26 AMalessandrogario
09/09/2019, 11:25 AMArvind D
09/17/2019, 6:06 PMKieran r
01/27/2020, 4:24 PMChris Broome
01/29/2020, 8:14 PMosquery-extensions
that works with osquery 4.1.2?seph
02/18/2020, 2:47 PMStefano Bonicatti
02/20/2020, 4:34 PMNiklas
02/28/2020, 2:35 PMCptOfEvilMinions
05/28/2020, 8:01 PM_event
based tables? If so, is there any example code?diptivs
06/10/2020, 10:44 PMVikram
06/19/2020, 12:01 PMVijay
08/05/2020, 5:34 PMnle
08/17/2020, 7:50 PMosquery\logger.h -> osquery\logger\logger.h
osquery\system.h -> osquery\core\system.h
osquery\tables.h -> osquery\core\tables.h
and it works!
now, we execute in SYSTEM terminal osqueryi.exe --extension path\to\extension.ext.exe --allow_unsafe=true
and we came across this error:
client connected.
TPipe::GetOverlappedResult errored GLE=errno = 109
client connected.
TConnectedClient died: Tpipe GetOverlappedResult falied
........
nle
09/24/2020, 8:47 AMrequest.constraints[""].getAll(osquery::EQUALS)
in my extension to get the query parameters. it's looks like this:
auto connection_details_list = request.constraints["connection_details"].getAll(osquery::EQUALS);
for (std::string connection_details : connection_details_list)
{
.....
}
From some reason, I don't get anything.
My query: SELECT * FROM MyTable WHERE connection_details = "username|password" AND ... AND ...;
Vikram
09/24/2020, 8:58 AMError: datatype mismatch
Running osqueryi.exe in verbose mode is giving this error
I0924 14:26:39.181792 35724 virtual_table.cpp:401] Failed to serialize the INSERT request
Error: datatype mismatch
groob
10/09/2020, 12:19 PMsuppandi
10/27/2020, 1:16 PM