osquery-python icon indicating copy to clipboard operation
osquery-python copied to clipboard

Python bindings for osquery's Thrift API

Results 19 osquery-python issues
Sort by recently updated
recently updated
newest added

# Bug report ### What operating system and version are you using? Description: Ubuntu 20.04.3 LTS Release: 20.04 Codename: focal ### What version of osquery are you using? 5.2.3 ###...

- platform : win11 - python version: 3.9.7 - osquery version: 5.2.3 - osquery-python version: 3.0.7 when release a `SpawnInstance`, it always raise a error `pywintypes.error: (1, 'DisconnectNamedPipe', 'Incorrect function.')`...

bug
triage

I have a connection error. Any suggestions? Thank you ``` PS C:\WINDOWS\system32> python 'C:\Users\sampng\Desktop\python_script\superset.py' Traceback (most recent call last): File "C:\Users\sampng\Desktop\python_script\superset.py", line 10, in result=instance.client.query("select * from time") File "C:\Users\sampng\AppData\Local\Programs\Python\Python36\lib\site-packages\osquery\extensions\ExtensionManager.py",...

question

I have been using the SpawnInstance class and have found that though the __del__ method attempts to remove the temporary files created by the tempfiles Python module by calling os.unlink...

Could you please bump the release? Thanks!

question

It's seems that the table plugin doesn't support complex stuff like required columns. After some investigation, it looks like the thrift api doesn't support this - although I was able...

bug
API change
feature

This is an issue with `thrift` (dependency of this library), an [open issue](https://issues.apache.org/jira/browse/THRIFT-4677) is already filed to that project. Environment: - Operating System: Windows 10 Pro (Simplified Chinese) - Python...

bug
Windows

Right now, only `TEXT` and `INTEGER` are defined.

up for grabs
feature

There's various places we make assumptions on leveraging domain sockets for communications with osquery. Let's update the documentation in this repro to reflect interfacing with Windows where appropriate.

documentation
Windows

``` ./osquery/management.py:215: server = TServer.TSimpleServer(processor, transport, tfactory, pfactory) ``` Should be replaced, this `TServer` implementation is just an example.

up for grabs