Skip to content

Conversation

@joshlemon
Copy link
Contributor

EDR Telemetry Pull Request

Contribution Details

Telemetry Validation

Run the following search in Uptycs for systemd_units:

select
  upt_time,
  id,
  description,
  load_state,
  active_state,
  sub_state,
  object_path,
  unit_file_state
from
  systemd_units
where
  upt_day = 20251118
  and upt_hostname = 'hostname'
  and id like '%test_telemetry_service%'
order by
  upt_time ASC

The above search produces the following output in Uptycs systemd_units telemetry:

image

Documentation or Evidence:

  • Official documentation (link: )
  • Screenshots attached
  • Sanitized logs provided
  • Private documentation (will share confidentially)

Type of Contribution

  • Adding telemetry information for an existing EDR product
  • Adding a new EDR product that meets eligibility criteria
  • Proposing new event categories/sub-categories
  • Documentation improvement
  • Tool enhancement

Validation Details

EDR Product Information

  • EDR Product Name: Uptycs
  • EDR Version: N/A
  • Operating System(s) Tested: Linux

Testing Methodology

Running the provided Linux Telemetry script on a Linux host and reviewing data in the Uptycs platform.

image

Additional Notes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant