CARVIEW |
Select Language
HTTP/2 200
date: Wed, 23 Jul 2025 04:06:34 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"bad57065f7698ae3ac3d9286c5c88567"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=AJdPe5ycbKW0qTR0MtQrmIsMIk1hXSuW2BDqhg0%2BIj72jg7zCqXxeUqUHbQprPnKYHVUw2Ixbf5L6jPoo75Q7RNdg2p4ym6uq2T2qYuHB2umt5DhvUP1g6iuYyZ4INpKVXRkCv%2BNiru8wK70CJqp7KURkqg5va%2FfsURpCGTZU77uOZXw7%2FU1kU7WDnH14zWK7O29M8IeBOg%2FIV0KD9z4fe8giuJ2V%2BkZ0NY5uYuTtynD3yGo5OXM0wLvYcEDL5dPtMuy%2BXQ81R3136K8BC8a6Q%3D%3D--tHjYky5%2BqfcRKeEU--IDFJAHfK%2F2PnRDHYWLhn0Q%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1805221885.1753243593; Path=/; Domain=github.com; Expires=Thu, 23 Jul 2026 04:06:33 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Thu, 23 Jul 2026 04:06:33 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: 998A:33F9F4:30C6BA:442576:68805FC9
Release 5.15.0 · osquery/osquery · GitHub
Loading
Skip to content
Navigation Menu
{{ message }}
-
-
Notifications
You must be signed in to change notification settings - Fork 2.5k
5.15.0
Compare
·
61 commits
to master
since this release
6a8a7f7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
5.15.0
Representing commits from 17 contributors! Thank you all.
Table Changes
- Add arc path to
chrome_extensions
on macOS (#8473) - Use empty columns instead of zeroes when undefined in
socket_events
(#8510) - Add support for accept to macOS table
socket_events
(#8508) - Add all-platform user-based optimized columns (#8496)
- Add columns to
es_process_events
(#8506) - Add Darwin platform optimized miscellaneous columns (#8484)
- Add all-platform path-based optimized columns (#8497)
- Add Windows platform optimized columns (#8495)
- Add
hash_executable
column tosignature
table (#8471) - Include VSCode Insiders extensions in
vscode_extensions
table (#8396) - Add POSIX platforms optimized columns (#8494)
- Add Linux platform optimized columns (#8493)
- Add all platform process based and curl optimized columns (#8498)
- Add Darwin platform optimized system-related columns (#8483)
- Add Darwin platform optimized path columns (#8482)
- Fix incorrect SID in
logged_in_users
table on windows when username and domain/device name are the same (#8486) - Update the
browser_firefox
table to exclude "Crash Reports" and "Pending Pings" folders (#8478) - Move status column to
extended_schema
for linuxsocket_events
(#8503)
Under the Hood improvements
- Utils: Optimize default status message constructor (#8489)
Bug Fixes
- Fix a leak in
genAarch64PlatformInfo
(#8462) - Fix a leak in
DiskArbitrationEventPublisher::getProperty
(#8463) - Catching generic exception in order to avoid crashing when parsing windows events logs (#8513)
- Fix leak in
windows_events
by usingscope_guard
(#8511) - Fixed eBPF's parsing of parent pid (#8501)
- Fix IO objects refcounting (#8481)
Documentation
- Add documentation for testing macOS EndpointSecurity (#8509)
- Add double quotes in Windows installation documentation (#8492)
- Update expired Slack invite (#8488)
- Update docs to correctly define
conditional_to_base64
(#8460)
Build
- build(deps): bump jinja2 from 3.1.4 to 3.1.5 (#8507)
- Remove yara schema subdirectory (#8461)
- Added chrono header file (#8512)
- Replace usage of libaudit function removed in v3.0.7 (#8401)
- Update xcode version for macos-14 from 14.3.1 to 15.4 (#8467)
- Restrict python versions differently (#8453)
- Update macOS test runner from 12 to 13 (#8459)
- Add CVEs to the ignored lists (#8458)
- Add a specific package build folder on Windows jobs (#8446)
- Update all Github actions to a version using NodeJs 20 (#8449)
- Reduce scheduled builds amount (#8457)
Assets 19
4 people reacted
You can’t perform that action at this time.