#974 More commands in the console with a new `help` Pull request opened by javuto Summary Adds a larger set of read-only console shortcuts backed by osquery tables, including file hashing/type checks, HTTP checks, process/network inspection, host inventory, persistence, package, browser extension, and firewall views. Also replaces the one-line

help

output with a grouped multi-line cheat sheet so operators can discover the new commands directly from the console. Changes • Added console aliases such as

hash

,

mime

,

curl

,

ports

,

sockets

,

lsof

,

env

,

routes

,

dns

,

autoruns

,

packages

,

firewall

,

os

,

sysinfo

, and

uptime

. • Kept command execution read-only by translating aliases to osquery

SELECT

statements. • Added validation for path, URL, PID, and no-argument commands. • Added platform-aware queries for

packages

and

firewall

. • Expanded parser tests for alias SQL generation, argument validation, and formatted help output. Validation •

GOCACHE=/tmp/osctrl-gocache go test ./pkg/console ./cmd/api/handlers

•

git diff --check

Security Notes • User-controlled path and URL values are SQL-quoted. • PID arguments are parsed as integers. •

curl

is limited to

http

and

https

URLs. • Shell-style syntax remains rejected for path commands. jmpsec/osctrl