Replaced Interrogate flow with Artifact. (Velocidex#67)

Interrogate is now Generic.Client.Info artifact. The interrogation service watches for flow completions of this artifact and populates client record/index. It is possible to extend the interrogate simply by customizing the artifact. Also fixed bug where server artifacts did not include CSV files.
olgermolla · Sep 9, 2019 · 4b32eab · 4b32eab
1 parent 0faa9b2
commit 4b32eab
Show file tree

Hide file tree

Showing 42 changed files with 1,324 additions and 3,055 deletions.
diff --git a/actions/actions.go b/actions/actions.go
@@ -35,10 +35,7 @@ type ClientAction interface {
 
 func GetClientActionsMap() map[string]ClientAction {
 	result := make(map[string]ClientAction)
-	result["GetClientInfo"] = &GetClientInfo{}
 	result["VQLClientAction"] = &VQLClientAction{}
-	result["GetHostname"] = &GetHostname{}
-	result["GetPlatformInfo"] = &GetPlatformInfo{}
 	result["UpdateForeman"] = &UpdateForeman{}
 	result["UpdateEventTable"] = &UpdateEventTable{}
 

diff --git a/actions/admin.go b/actions/admin.go
diff --git a/actions/admin_test.go b/actions/admin_test.go
diff --git a/actions/common.go b/actions/common.go
@@ -27,23 +27,6 @@ import (
 	"www.velocidex.com/golang/velociraptor/responder"
 )
 
-type GetClientInfo struct{}
-
-func (self *GetClientInfo) Run(
-	config *config_proto.Config,
-	ctx context.Context,
-	args *crypto_proto.GrrMessage,
-	output chan<- *crypto_proto.GrrMessage) {
-	responder := responder.NewResponder(args, output)
-	info := &actions_proto.ClientInformation{
-		ClientName:    config.Version.Name,
-		ClientVersion: config.Version.Version,
-		Labels:        config.Client.Labels,
-	}
-	responder.AddResponse(info)
-	responder.Return()
-}
-
 type UpdateForeman struct{}
 
 func (self *UpdateForeman) Run(

diff --git a/actions/common_test.go b/actions/common_test.go