oriol
07/18/2018, 9:43 AMalessandrogario
alessandrogario
alessandrogario
alessandrogario
jgshomo
01/17/2019, 4:23 PMYehonatanShami
05/01/2019, 10:56 AMOmer Nizri
05/27/2019, 3:11 PMalessandrogario
vaar
07/11/2019, 3:22 PMMike Myers
08/21/2019, 8:18 PM--extensions_autoload=\path\to\extensions.load
argument to osqueryd
?Arvind D
08/22/2019, 1:56 PMnet
. but the new osqueryd cannot get the LOCK since it is held by the zombie osqueryd...if I kill the zombie process I see that the LOCK file still exist...this is the problem I am trying to solve.bao
09/03/2019, 4:29 PMtearDown()
and destructors not being called when exiting osqueryi or osqueryd?alessandrogario
alessandrogario
Arvind D
09/17/2019, 6:06 PMKieran r
01/27/2020, 4:24 PMChris Broome
01/29/2020, 8:14 PMosquery-extensions
that works with osquery 4.1.2?seph
Stefano Bonicatti
02/20/2020, 4:34 PMNiklas
02/28/2020, 2:35 PMCptOfEvilMinions
05/28/2020, 8:01 PM_event
based tables? If so, is there any example code?diptivs
06/10/2020, 10:44 PMVikram
06/19/2020, 12:01 PMVijay
08/05/2020, 5:34 PMnle
08/17/2020, 7:50 PMosquery\logger.h -> osquery\logger\logger.h
osquery\system.h -> osquery\core\system.h
osquery\tables.h -> osquery\core\tables.h
and it works!
now, we execute in SYSTEM terminal osqueryi.exe --extension path\to\extension.ext.exe --allow_unsafe=true
and we came across this error:
client connected.
TPipe::GetOverlappedResult errored GLE=errno = 109
client connected.
TConnectedClient died: Tpipe GetOverlappedResult falied
........
nle
09/24/2020, 8:47 AMrequest.constraints[""].getAll(osquery::EQUALS)
in my extension to get the query parameters. it's looks like this:
auto connection_details_list = request.constraints["connection_details"].getAll(osquery::EQUALS);
for (std::string connection_details : connection_details_list)
{
.....
}
From some reason, I don't get anything.
My query: SELECT * FROM MyTable WHERE connection_details = "username|password" AND ... AND ...;
Vikram
09/24/2020, 8:58 AMError: datatype mismatch
Running osqueryi.exe in verbose mode is giving this error
I0924 14:26:39.181792 35724 virtual_table.cpp:401] Failed to serialize the INSERT request
Error: datatype mismatch
groob
suppandi
10/27/2020, 1:16 PM