Add --yara_sigurl_authenticate flag by zwass · Pull Request #8437 · osquery/osquery

added 2 commits

October 8, 2024 12:02
This allows osquery users to host their yara rules behind an authenticated endpoint.

Allow authentication for yara sigurl requests by enabling this flag. When enabled, osquery will send a POST request with a body containing the node key as in other osquery TLS requests. Server response is expected to be the same as unauthenticated requests: a plaintext yara signature file.

@zwass zwass changed the title Yara sigurl authenticate Add --yara_sigurl_authenticate flag

Oct 8, 2024

@zwass zwass mentioned this pull request

Oct 8, 2024

15 tasks

directionless

@zwass zwass deleted the yara-sigurl-authenticate branch

October 10, 2024 00:14