Merge pull request #91 from jmpsec/osquery-4-5-1

Support for osquery 4.5.1
jmpsec · Nov 6, 2020 · cbff3b9 · cbff3b9
2 parents 8210c33 + 4a18f2f
commit cbff3b9
Show file tree

Hide file tree

Showing 13 changed files with 548 additions and 33 deletions.
diff --git a/admin/handlers/get.go b/admin/handlers/get.go
@@ -17,7 +17,7 @@ import (
 // osquery
 const (
 	// osquery version to display tables
-	osqueryTablesVersion string = "4.4.0"
+	osqueryTablesVersion string = "4.5.1"
 	// JSON file with osquery tables data
 	osqueryTablesFile string = "data/" + osqueryTablesVersion + ".json"
 	// Carved files folder

diff --git a/admin/main.go b/admin/main.go
@@ -84,7 +84,7 @@ const (
 // osquery
 const (
 	// osquery version to display tables
-	osqueryTablesVersion string = "4.4.0"
+	osqueryTablesVersion string = "4.5.1"
 	// JSON file with osquery tables data
 	osqueryTablesFile string = "data/" + osqueryTablesVersion + ".json"
 )

diff --git a/deploy/docker/admin/Dockerfile b/deploy/docker/admin/Dockerfile
@@ -15,7 +15,7 @@ COPY admin/templates/components/page-head-online.html tmpl_admin/components/page
 COPY admin/templates/components/page-js-online.html tmpl_admin/components/page-js.html
 COPY admin/static/ static
 
-COPY deploy/osquery/data/4.4.0.json data/
+COPY deploy/osquery/data/4.5.1.json data/
 COPY deploy/osquery/osquery-cfg.json data/
 
 RUN mkdir -p carved_files

diff --git a/deploy/docker/nodes/centos6/Dockerfile b/deploy/docker/nodes/centos6/Dockerfile
@@ -1,7 +1,7 @@
 FROM centos:6
 LABEL maintainer="javuto"
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/rpm/osquery-4.4.0-1.linux.x86_64.rpm" -o "/tmp/osquery.rpm"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/rpm/osquery-4.5.1-1.linux.x86_64.rpm" -o "/tmp/osquery.rpm"
 RUN rpm -ivh "/tmp/osquery.rpm"
 
 COPY deploy/docker/nodes/centos6/wait.sh .

diff --git a/deploy/docker/nodes/centos7/Dockerfile b/deploy/docker/nodes/centos7/Dockerfile
@@ -1,7 +1,7 @@
 FROM centos:7
 LABEL maintainer="javuto"
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/rpm/osquery-4.4.0-1.linux.x86_64.rpm" -o "/tmp/osquery.rpm"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/rpm/osquery-4.5.1-1.linux.x86_64.rpm" -o "/tmp/osquery.rpm"
 RUN rpm -ivh "/tmp/osquery.rpm"
 
 COPY deploy/docker/nodes/centos7/wait.sh .

diff --git a/deploy/docker/nodes/debian8/Dockerfile b/deploy/docker/nodes/debian8/Dockerfile
@@ -3,7 +3,7 @@ LABEL maintainer="javuto"
 
 RUN apt update && apt install -y curl
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.4.0_1.linux.amd64.deb" -o "/tmp/osquery.deb"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.5.1_1.linux.amd64.deb" -o "/tmp/osquery.deb"
 RUN dpkg -i "/tmp/osquery.deb"
 
 COPY deploy/docker/nodes/debian8/wait.sh .

diff --git a/deploy/docker/nodes/debian9/Dockerfile b/deploy/docker/nodes/debian9/Dockerfile
@@ -3,7 +3,7 @@ LABEL maintainer="javuto"
 
 RUN apt update && apt install -y curl
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.4.0_1.linux.amd64.deb" -o "/tmp/osquery.deb"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.5.1_1.linux.amd64.deb" -o "/tmp/osquery.deb"
 RUN dpkg -i "/tmp/osquery.deb"
 
 COPY deploy/docker/nodes/debian9/wait.sh .

diff --git a/deploy/docker/nodes/ubuntu16/Dockerfile b/deploy/docker/nodes/ubuntu16/Dockerfile
@@ -3,7 +3,7 @@ LABEL maintainer="javuto"
 
 RUN apt update && apt install -y curl
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.4.0_1.linux.amd64.deb" -o "/tmp/osquery.deb"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.5.1_1.linux.amd64.deb" -o "/tmp/osquery.deb"
 RUN dpkg -i "/tmp/osquery.deb"
 
 COPY deploy/docker/nodes/ubuntu16/wait.sh .

diff --git a/deploy/docker/nodes/ubuntu18/Dockerfile b/deploy/docker/nodes/ubuntu18/Dockerfile
@@ -3,7 +3,7 @@ LABEL maintainer="javuto"
 
 RUN apt update && apt install -y curl
 
-RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.4.0_1.linux.amd64.deb" -o "/tmp/osquery.deb"
+RUN curl -# "https://osquery-packages.s3.amazonaws.com/deb/osquery_4.5.1_1.linux.amd64.deb" -o "/tmp/osquery.deb"
 RUN dpkg -i "/tmp/osquery.deb"
 
 COPY deploy/docker/nodes/ubuntu18/wait.sh .