-
A test failed on a tracked branch
```
TypeError: Cannot read properties of undefined (reading 'id')
at Context. (x-pack/test/api_integration/apis/osquery/packs.ts:104:39)
at runMicrotasks ()
…
-
# Blueprint
It seems that some code parts like win/COM related functions contain a lot of places where object state is managed manually.
E.g. every time `BSTR` string or raw COM object pointer…
-
### Goal
Extracted from #5222 (see https://github.com/fleetdm/fleet/issues/5222#issuecomment-1251096271).
The various Agent Options settings are now validated based on their data type, but readi…
-
# Question
This is regarding one our deployments of OSQUERY. It appears that OSQuery doesn't capture failed logins from MacOS endpoints. For security use cases, it's critical to have these deta…
-
## Problem
As an admin, I need a scoping mechanism for mobile devices.
For desktop hosts, I'm able to apply a dynamic label to my hosts by building a query. The current label framework …
-
Currently the permission tests part of the `osquery_core_tests_watcherpermissionstests-test` test have several test units that do not run because they expect to be run as root.
The PR https://githu…
-
In [2019-09-17 office hours](https://github.com/osquery/foundation/pull/27) we talked a little about whether we should be shipping packs. In office hours, there's a strong bias to drop them. We don't …
-
# Bug report
### What operating system and version are you using?
version = CentOS Linux release 7.2.1511 (Core)
build =
platform = rhel
### What version of osquery are you usi…
-
Deploying the fleetd agent is best practice for all new Fleet user.
Some existing customers use plain osquery + the `fleetd_tables` extension.
## Goal
| User story |
|:-------------------…
-
# Bug report
### What operating system and version are you using?
```
# cat /etc/os-release
NAME="Oracle Linux Server"
VERSION="7.7"
ID="ol"
ID_LIKE="fedora"
VARIANT="Server"
VARIANT_ID="…