Lucas Manuel Rodriguez

Minor amendment to `--tls_dump` docs

3

See: https://github.com/osquery/osquery/blob/abab44c4dab87d7881d3b8a9955fcb1995db2fdd/osquery/remote/transports/tls.cpp#L223-L225 https://github.com/osquery/osquery/blob/abab44c4dab87d7881d3b8a9955fcb1995db2fdd/osquery/remote/transports/tls.cpp#L257-L259 https://github.com/osquery/osquery/blob/abab44c4dab87d7881d3b8a9955fcb1995db2fdd/osquery/remote/transports/tls.cpp#L272-L274

Support rollbacks of osquery when new versions introduce new column families

5

This PR is implementing what @Smjert proposed here: https://github.com/osquery/osquery/pull/7675#discussion_r933534284 I tested it with a database written by a branch that introduced a new column family (#7675).

Add fix for discovery query bug and add tests for distributed queries

1

Fixes #5260 and adds some tests to `Distributed.acceptWork`.

Add simple deny-listing capability to distributed queries

10

Hi folks. I'm Lucas from [Fleet](https://github.com/fleetdm). I'll first introduce the issue we are seeing with distributed queries, and later propose how osquery could help with such scenario. ## What Following...

**Fleet version**: `main` Orbit uses `os.TempDir` to store the proxy certificate for the `--insecure` mode: https://github.com/fleetdm/fleet/blob/e92ea532b6d56a75e24f79013a906009a1c0f235/orbit/cmd/orbit/orbit.go#L398 We've heard reports from users that using a temp directory is unstable: - On...

Add `pkg` signing and notarization support to `fleetdm/fleetctl` docker image

9

### Goal Add signing and notarization support to the `fleetdm/fleetctl` (beta) docker image. No stapling will be required on this iteration. ### How? #6229 describes the approach that we think...

Hi folks. This change allows callers of `scepserver.MakeHTTPHandler` to choose/set the path for the SCEP service (other than `/scep`).

Add Orbit testing to `pull_request_template.md`

1

# Checklist for submitter If some of the following don't apply, delete the relevant line. - [ ] Changes file added for user-visible changes (in `changes/` and/or `orbit/changes/`). - [...

Uninstalling Fleet osquery (orbit) on Windows does not remove the installed files

10

**Fleet version**: Orbit 0.0.5 **Operating system**: VMWare Fusion Pro with Windows 10 Pro. ### 🧑‍💻  Expected behavior Uninstalling Fleet osquery removes `C:\Program Files\Orbit` directory. ### 💥  Actual behavior After uninstalling...

Table `process_file_events` is not returning events for *new* files (under the configured `file_paths`)

1

# Bug report (Could be related to: #7943.) ### What operating system and version are you using? Reproduced on CentOS 7, Ubuntu 20.04. ### What version of osquery are you...