kibana/docs/osquery/prebuilt-packs.asciidoc
Melissa Burpo fb453aca45
Osquery pack attribution (#131462)
* add new reference page for prebuilt packs

* add link to new prebuilt pack ref page

* convert list to table

* add table close

* Apply suggestions from code review

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2022-05-04 16:13:54 -05:00

63 lines
1.5 KiB
Text

[[prebuilt-packs]]
== Prebuilt packs reference
This section lists all prebuilt packs available for Osquery Manager.
Each pack is also available as a saved object, with the name `Pack: <pack-name>`.
For more information, refer to <<osquery-prebuilt-packs>>.
|===
|Name |Description |Source |Added
|`hardware-monitoring`
|Monitor for hardware changes.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`incident-response`
|Detect and respond to breaches.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`it-compliance`
a|Identify outdated and vulnerable software.
Dashboard: `[Osquery Manager] Compliance pack`
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`osquery-monitoring`
|Monitor Osquery info and performance.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`ossec-rootkit`
a|Run rootkit detection queries to monitor for compromise.
Dashboard: `[Osquery Manager] OSSEC rootkit pack`
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`osx-attacks`
|Identify compromised macOS systems.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`unwanted-chrome-extensions`
|Monitor for malicious Chrome extensions.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`vuln-management`
|Identify system vulnerabilities.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|`windows-attacks`
|Monitor for evidence of Windows attacks.
|https://github.com/osquery/osquery/tree/master/packs[Osquery]
|8.2
|===