Ugur
11/08/2023, 2:01 PMLinenBot
11/10/2023, 2:22 PMGrepCaffeine
joined #general.github
11/10/2023, 6:05 PM<https://github.com/osquery/osquery/commit/89ccf14ef01bb4ef0d618732082335df8f3015ad|89ccf14ef01bb4ef0d618732082335df8f3015ad>
Remove atom_packages table (#8181) - Zach Wassermangithub
11/10/2023, 6:54 PM<https://github.com/osquery/osquery/commit/e666542bef5f7be5dc4ce7ba4f344594726d38d9|e666542bef5f7be5dc4ce7ba4f344594726d38d9>
docs: Correct link to a PR in the 4.7.0 changelog (#8186) - Stefano Bonicattigithub
11/10/2023, 6:55 PM<https://github.com/osquery/osquery/commit/ac174deee3f7e902a7abc817c602550eada3c112|ac174deee3f7e902a7abc817c602550eada3c112>
ci: Correct job order (#8185) - Stefano BonicattiLinenBot
11/13/2023, 6:59 AMthinh nguyen
joined #general.ardroci
11/14/2023, 6:56 PM.sources
extension. Osquery is only collecting data from /etc/apt/sources.list
and /etc/apt/sources.list.d/%.list
. Is there a reason for that or am I missing something?github
11/15/2023, 1:02 PM<https://github.com/osquery/osquery/commit/904409ebd7aa72397870c1cb8b861b78369ba994|904409ebd7aa72397870c1cb8b861b78369ba994>
process_open_sockets: Mark pid column as additional instead of index (#8191) - Stefano BonicattiJohn Lamb
11/15/2023, 8:12 PMJohn Lamb
11/15/2023, 11:48 PMJohn Lamb
11/15/2023, 11:55 PMDenis
11/17/2023, 10:18 AMJerfe
11/20/2023, 8:54 AMTyler
11/20/2023, 12:52 PMLinenBot
11/20/2023, 6:37 PMScott Bonar
joined #general.zwass
no template named 'unary_function' in namespace 'std'
Not sure if this is because of recent changes in osquery, dependencies, or macOS (I'm on a different machine from usual, this one is an M2 on macOS 14.1.1)github
11/22/2023, 12:49 AM<https://github.com/osquery/osquery/commit/222991a15b4ae0a0fb919e4965603616536e1b0a|222991a15b4ae0a0fb919e4965603616536e1b0a>
build: Temporary workaround to build with XCode 15 (#8197) - Stefano BonicattiLinenBot
11/22/2023, 11:05 PMPredrag Tasevski
joined #general.dimaivanov1234
11/24/2023, 7:22 AM_andy
11/26/2023, 7:35 AMxx-zhang
11/28/2023, 1:38 AMxx-zhang
11/28/2023, 1:38 AMgithub
11/28/2023, 7:57 PM<https://github.com/osquery/osquery/commit/1028f32e80b33551af6937a30b1b287ea4971820|1028f32e80b33551af6937a30b1b287ea4971820>
file: Add Shortcut metadata parsing on Windows (#8143) - Stefano BonicattiBenedict lawrence
11/30/2023, 10:07 AMGeorge
11/30/2023, 3:53 PMcounter = 0
but I’m still seeing some hosts report every single app with counter = 1
. Does anyone know why this is? The docs say
For initial query results that include all records counter will be "0", while initial results without all records (like event tables) will start at "1".
while initial results without all records (like event tables) will start at “1”I don’t fully understand what this means but the apps table isn’t an event table so I don’t think it applies. It’s also not completely clear to me what the schedule epoch does - from what I understand this is an arbitrary static field I can set to any 64bit integer and it will stay the same unless I decide to change it? Thanks!
github
12/01/2023, 7:45 PM<https://github.com/osquery/osquery/commit/3e92fb2d0f5b00a4c58ff51c49832e7f001aeb96|3e92fb2d0f5b00a4c58ff51c49832e7f001aeb96>
ci: Fix Linux build (#8208) - Stefano Bonicattigithub
12/01/2023, 11:15 PM<https://github.com/osquery/osquery/commit/73599293ce79071f601dde4436f5e361172610c0|73599293ce79071f601dde4436f5e361172610c0>
ci: Update nvdlib to use the latest NVD APIs (#8207) - Stefano BonicattiNagesh Kasar
12/04/2023, 11:23 AMVictor Lyuboslavsky
12/04/2023, 8:57 PMosquery_schedule
? I modified the query
in my schedule (but the name remained the same), yet osquery is still reporting the old stats from the previous query. Is this intended? I expected the stats to reset if the actual query is now different. Relevant config:
"packs": {
"Global": {
"queries": {
"Get JetBrains Plugins": {
"query": "select * from time;",
"interval": 3600,
"platform": "",
"version": "",
"snapshot": true
}
}
},
Evan Romasco-Kelly
12/05/2023, 10:43 PMbrew
cask for osquery? Installs are working on macOS, but the symlink in /usr/local/bin (on 2021 MacBook Pro M1, macOS 14) points to an empty directory where it seems to expect osquery.app