I was wondering, are the fleet osquery extensions ...
# fleet
j
I was wondering, are the fleet osquery extensions available for manual install/management or are they only a paid option with the fleet agent?
(I won't complain either way, I just didn't succeed in finding the answer myself)
m
Hi @John Lamb, are there any particular extensions that you're referring to?
j
for instance the fleet extension that includes
tcc_access
this might be a thing where if you are running free fleet for managing osquery only, fleetd might not be included
I have successfully deployed the macadmins osquery extension manually, for instance
it appears i can generate these from source from the fleet github repository
m
The easiest way to get those tables would be to download the fleetd package, which is free to use and does not require a premium subscription. Alternatively, you could use this method to pull the fleetd tables into standalone osquery.
j
I did #2, for some reason my searches for fleetd package are coming up blank
m
Can you share the output of the command that you ran to build the package?
j
i don't have the ability to send text from that machine, but it was basically just go downloading dependencies, and then succeeding without a message
and then i added the extension to my autoload (replaced the macadmin queries)
its working now :)
m
Glad to hear!