uptycs

Documentation

Index

• func CreateUptycsAPI(uptCfgPath string, debugEnabled bool) (models.GoQueryAPI, error)
• type GoqueryConfig
• type UptycsAPI
  • func (u UptycsAPI) CheckHost(uuid string) (hosts.Host, error)
  • func (u UptycsAPI) FetchResults(queryName string) ([]map[string]string, string, error)
  • func (u UptycsAPI) ScheduleQuery(uuid string, query string) (string, error)

Functions

func CreateUptycsAPI

func CreateUptycsAPI(uptCfgPath string, debugEnabled bool) (models.GoQueryAPI, error)

CreateUptycsAPI creates an authenticated instance of the `UptycsAPI` object

Types

type GoqueryConfig

type GoqueryConfig struct {
	GoqueryConfig config.Config `json:"goqueryCfg"`
	UptCfgPath    string        `json:"uptCfgPath"`
}

type UptycsAPI

type UptycsAPI struct {
	Authed bool

	DebugMode bool
	// contains filtered or unexported fields
}

func (UptycsAPI) CheckHost

func (u UptycsAPI) CheckHost(uuid string) (hosts.Host, error)

func (UptycsAPI) FetchResults

func (u UptycsAPI) FetchResults(queryName string) ([]map[string]string, string, error)

func (UptycsAPI) ScheduleQuery

func (u UptycsAPI) ScheduleQuery(uuid string, query string) (string, error)

This is a dirty hack that will make memory expand per query due to its design. Uptycs currently does not have a way to schedule queries on an individual host. So, instead, we make a realtime query, and store the result in a map with a UUID as a key, then return that as the "result".