VERSE
2ef3c90819
- I wrote a scripts to copy and generate all commands missing in iris from fig repo: https://github.com/withfig/autocomplete - Add a new script to generate commands docs about which commands currently are inside commands folder 377d4aac663590e504fe39a92eb4dac4cbd333b2 - Add more icons e64d4e70a1db61e62053460a882e093bd6373ab1
55 lines
3.9 KiB
Go
55 lines
3.9 KiB
Go
package ops
|
|
|
|
import (
|
|
"github.com/versenilvis/iris/commands/core"
|
|
)
|
|
|
|
func init() {
|
|
core.Register(&core.Spec{
|
|
Name: "osqueryi",
|
|
Description: "Your OS as a high-performance relational database",
|
|
Options: []core.Option{
|
|
{Name: "--flagfile", Description: "Line-delimited file of additional flags"},
|
|
{Name: "--D", Description: "Run as a daemon process"},
|
|
{Name: "--S", Description: "Run as a shell process"},
|
|
{Name: "--alarm_timeout", Description: "Seconds to allow for shutdown. Minimum is 10"},
|
|
{Name: "--carver_block_size", Description: "Size of blocks used for POSTing data back to remote endpoints"},
|
|
{Name: "--carver_compression", Description: "Compress archives using zstd prior to upload (default false)"},
|
|
{Name: "--carver_continue_endpoint", Description: "TLS/HTTPS endpoint that receives carved content after session creation"},
|
|
{Name: "--carver_disable_function", Description: "Disable the osquery file carver function (default true)"},
|
|
{Name: "--carver_expiry", Description: "Seconds to store successful carve result metadata (in carves table)"},
|
|
{Name: "--carver_start_endpoint", Description: "TLS/HTTPS init endpoint for forensic carver"},
|
|
{Name: "--config_accelerated_refresh", Description: "Interval to wait if reading a configuration fails"},
|
|
{Name: "--config_check", Description: "Check the format of an osquery config and exit"},
|
|
{Name: "--config_dump", Description: "Dump the contents of the configuration, then exit"},
|
|
{Name: "--config_enable_backup", Description: "Backup config and use it when refresh fails"},
|
|
{Name: "--config_path", Description: "Path to JSON config file"},
|
|
{Name: "--config_plugin", Description: "Config plugin name"},
|
|
{Name: "--config_refresh", Description: "Optional interval in seconds to re-read configuration"},
|
|
{Name: "--config_tls_endpoint", Description: "TLS/HTTPS endpoint for config retrieval"},
|
|
{Name: "--config_tls_max_attempts", Description: "Number of attempts to retry a TLS config request"},
|
|
{Name: "--daemonize", Description: "Attempt to daemonize (POSIX only)"},
|
|
{Name: "--database_dump", Description: "Dump the contents of the backing store"},
|
|
{Name: "--database_path", Description: "If using a disk-based backing store, specify a path"},
|
|
{Name: "--disable_carver", Description: "Disable the osquery file carver (default true)"},
|
|
{Name: "--disable_enrollment", Description: "Disable enrollment functions on related config/logger plugins"},
|
|
{Name: "--disable_extensions", Description: "Disable extension API"},
|
|
{Name: "--disable_reenrollment", Description: "Disable re-enrollment attempts if related plugins return invalid"},
|
|
{Name: "--disable_tables", Description: "Comma-delimited list of table names to be disabled"},
|
|
{Name: "--disable_watchdog", Description: "Disable userland watchdog process"},
|
|
{Name: "--enable_extensions_watchdog", Description: "Enable userland watchdog for extensions processes"},
|
|
{Name: "--enable_tables", Description: "Comma-delimited list of table names to be enabled"},
|
|
{Name: "--enroll_always", Description: "On startup, send a new enrollment request"},
|
|
{Name: "--enroll_secret_env", Description: "Name of environment variable holding enrollment-auth secret"},
|
|
{Name: "--enroll_secret_path", Description: "Path to an optional client enrollment-auth secret"},
|
|
{Name: "--enroll_tls_endpoint", Description: "TLS/HTTPS endpoint for client enrollment"},
|
|
{Name: "--extensions_autoload", Description: "Optional path to a list of autoloaded & managed extensions"},
|
|
{Name: "--extensions_interval", Description: "Seconds delay between connectivity checks"},
|
|
{Name: "--extensions_require", Description: "Comma-separated list of required extensions"},
|
|
{Name: "--extensions_socket", Description: "Path to the extensions UNIX domain socket"},
|
|
{Name: "--extensions_timeout", Description: "Seconds to wait for autoloaded extensions"},
|
|
{Name: "--force", Description: "Force osqueryd to kill previously-running daemons"},
|
|
},
|
|
})
|
|
}
|