Derek Brown

Results 20 issues of Derek Brown

Initial revision. All windows HTTP changes on top of latest main. ### What does this PR do? Adds support for HTTP stats for windows in NPM. Adds support for HTTPS...

changelog/no-changelog
team/networks

from shirou/gopsutil. Change for agent6, to enable process metadata. Associated change for gopsutil has been submitted to that package's owner.

… site id. ### What does this PR do? ### Additional Notes ### Possible Drawbacks / Trade-offs ### Describe how to test/QA your changes Install windows with IIS. install agent...

changelog/no-changelog
team/networks

This is a preliminary PR Attempts to replicate the behavior of copying precompiled test executables to the host, and executing them there. Includes the ability to set up IIS (a...

changelog/no-changelog
[deprecated] qa/skip-qa - use other qa/ labels
team/windows-agent
team/windows-kernel-integrations
qa/no-code-change

### What does this PR do? Converges the USM code to use the more general ETW component, instead of its own standalone implementation. ### Motivation Not having duplicated code. ###...

changelog/no-changelog
component/system-probe
team/windows-agent
team/windows-kernel-integrations

Updates previous PR. In previous PR, each file type was given a specific go type, but didn't follow through on registry types. This completes that operation by providing distinct types...

changelog/no-changelog
component/system-probe
qa/skip-qa [deprecated]
team/agent-security
team/windows-kernel-integrations
qa/done

### What does this PR do? Add s some additional debug logging ### Motivation Some additional troubleshooting help in dev ### Additional Notes ### Possible Drawbacks / Trade-offs ### Describe...

changelog/no-changelog
qa/skip-qa
team/agent-security
team/windows-kernel-integrations
qa/done

First commit: change process agent system probe communication to use named pipes. ### Motivation Change ipc transport to named pipes instead of localhost tcp connections. Prevents port collisions. ### Additional...

changelog/no-changelog
component/system-probe
team/windows-kernel-integrations

### What does this PR do? Enables the Windows CWS feature on release builds. ### Motivation We are releasing windows CWS. ### Additional Notes ### Describe how to test/QA your...

team/windows-kernel-integrations
qa/done

### What does this PR do? Increases the size of the pre-allocated buffers used for transferring process notifications from the kernel to user space. ### Motivation It was discovered in...

changelog/no-changelog
team/agent-security
team/windows-kernel-integrations