kolide / launcher

Osquery launcher, autoupdater, and packager
https://kolide.com/launcher
Other
500 stars 99 forks source link

[KATC] Add support for .indexeddb.leveldb files #1769

Closed RebeccaMahany closed 6 days ago

RebeccaMahany commented 6 days ago

Builds on previous work (https://github.com/kolide/launcher/pull/1767, https://github.com/kolide/launcher/pull/1763) to add support for querying Chrome extension data:

I am waffling on whether I should move the ee/indexeddb code into this package. Since both indexeddb.QueryIndexeddbObjectStore and indexeddb.DeserializeChrome adhere to katc.katcSourceType.dataFunc and katc.rowTransformStep.transformFunc, respectively, it seems to make more sense for that code to live inside this package -- and we don't currently have any other usecases for interacting with indexeddb otherwise. I'd like to get folks' thoughts on this question -- if we do want to move the code, I'll do it in a follow-up PR to keep these simple/reviewable!

Additionally, fixed an issue where underscores in filepaths were treated as single-char wildcards; we don't need to support this functionality, so I just removed it.