osquery 5.17.0 ڈاؤن لوڈ

5.17.0
Git Commits
What's Changed
- Add CHANGELOG.md entry for 5.16.0 by @lucasmrod in #8548
- Add symlink_target_path to files tables by @DocEmmetBrown in #8502
- cve: Ignore libarchive CVE-2024-26256 by @Smjert in #8546
- Fixes in windows helpers by @zwass in #8549
- Align ES functions with documented macOS versions by @SilverPlate3 in #8338
- Fix include path in logger-plugins.md by @zwass in #8550
- Fix integration test name in Windows build instructions by @zwass in #8552
- Fix event expiration to prevent losing events by @zwass in #8535
- Update shell_history table to include ash by @jbeley in #8568
- Fix dicker container table disk/write metrics, compares "op" values with ignore case by @Kislaci90 in #8566
- Escape service binary path in manage-osqueryd.ps1 by @smithclay in #8569
- Update docker_container_stats table to include memory_inactive_file and memory_total_inactive_file by @kfnorbi in #8577
- Add auto_update and app_name column to homebrew_packages table by @DocEmmetBrown in #8520
- Add support for scheduled queries to run at startup by @Micah-Kolide in #8554
- Boost 1.87 compatibility by @carlsmedstad in #8533
- Pin macos python versions in CI to fix mismatch between builder and test runner by @scottvanta in #8559
- cve: Ignore util-linux CVE-2024-28085 by @Smjert in #8579
- build(deps): bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in #8563
- Fix SMC reading values by @sgress454 in #8583
- Fixes network metrics by @Kislaci90 in #8567
- Implement yara_events table for Windows by @zwass in #8580
- Fix flaky mdfind test in CI by @zwass in #8589
- libs: openssl: 3.2.1 -> 3.4.1 by @LeSuisse in #8586
- Add support for DEB822-style apt sources by @dantecatalfamo in #8556
- Add support for msix packages by @ksykulev in #8585
- Implement dns_lookup_events table on Windows by @zwass in #8553
- Added UpgradeCode to programs table by @ksykulev in #8587
- libs: expat bump from 2.6.0 to 2.7.1 by @LeSuisse in #8595
- Update ubuntu runners to 22.04 by @zwass in #8592
- Refactor ETW helpers for unicode support by @zwass in #8596
- Fix/startup items parsing by @AndreaMarangoni in #8536
- Filter the Win32_Processor query to only required fields by @jaymzjulian in #8598
New Contributors
- @DocEmmetBrown made their first contribution in #8502
- @jbeley made their first contribution in #8568
- @Kislaci90 made their first contribution in #8566
- @smithclay made their first contribution in #8569
- @kfnorbi made their first contribution in #8577
- @scottvanta made their first contribution in #8559
- @LeSuisse made their first contribution in #8586
- @dantecatalfamo made their first contribution in #8556
- @jaymzjulian made their first contribution in #8598
Full Changelog: 5.16.0...5.17.0