Hi, I am trying to use the curl table to get host ...
# general
j
Hi, I am trying to use the curl table to get host information from a google VM. Is it possible to add in the custom header, "Metadata-Flavour: Google". that is required?
s
I think we’ve generally thought that was a bad idea — starts feeling like there’s more of a route to using osquery to exploit something. But that’s not a super well considered view.
If there’s not already some GCP metadata table, I think there’d be interst in one
j
yeah there isnt a gcp table and i want to extract the project id etc. Seems like the only way is to create a custom extension? :/
s
I think we’d welcome a PR
I knew this had come up before. https://github.com/osquery/osquery/issues/6574