Skip to content

Add file carving support#15

Merged
zwass merged 15 commits into
fleetdm:masterfrom
zwass:file-carving
Nov 5, 2020
Merged

Add file carving support#15
zwass merged 15 commits into
fleetdm:masterfrom
zwass:file-carving

Conversation

@zwass
Copy link
Copy Markdown
Member

@zwass zwass commented Nov 5, 2020

  • Add endpoints for osquery to register and continue a carve.
  • Implement client functionality for retrieving carve details and contents in fleetctl.
  • Add documentation on using file carving with Fleet.

Addresses kolide/fleet#1714

@zwass zwass merged commit e452cc6 into fleetdm:master Nov 5, 2020
@zwass zwass deleted the file-carving branch November 5, 2020 04:45
@zwass
Copy link
Copy Markdown
Member Author

zwass commented Nov 13, 2020

@reynas @jacknagz @1ihor1 you expressed interest in this feature which is now available Fleet 3.3.0.

chiiph pushed a commit that referenced this pull request Aug 4, 2021
TsekNet added a commit to TsekNet/fleet that referenced this pull request Mar 22, 2026
- Extract nested block to tryReuseExistingInstaller helper (fleetdm#5)
- Add 30s timeout to HEAD request client (fleetdm#2)
- Validate URL scheme (http/https only) for SSRF defense (fleetdm#1)
- Weak ETag comparison: strip W/ prefix per RFC 7232 (fleetdm#3)
- Validate ETag/Last-Modified format before storing (fleetdm#6)
- Move HTTPETag/HTTPLastModified into fillSoftwareInstallerPayloadFromExisting (fleetdm#9)
- Remove duplicate store-existence check (fleetdm#7)
- Add ORDER BY si.id DESC to LIMIT 1 query (fleetdm#8)
- Use ds.writer (primary) for GetInstallerByTeamAndURL (fleetdm#13)
- Rename checkURLChanged to hasURLContentChanged (fleetdm#11)
- Rename urlContentUnchanged to canSkipDownload (fleetdm#16)
- Add nil guard in mock to prevent panic in existing tests
- Fix schema.sql collation to match migration output
- Fix lint: use svc.logger instead of bare slog.Warn
- Add tests: weak ETag, both headers precedence, 403/500 status,
  non-HTTP scheme, normalizeETag, validETag (fleetdm#3,12,14,17)
- Document redirect limitation (fleetdm#15)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant