v3.0.1

This major release replaces our osquery dependency with kmd and a set of bash and powershell scripts. The net effect of these changes:

• startup time is minimized since we don't have to wait for osquery/Thrift readiness
• scans are significantly faster (4x+)
• the entire app is much more stable - thrift connection dropping and low-level osquery issues are not an issue anymore
• app size reduction - though it's electron and big by default, not bundling the osquery binaries reduces the overall bundle size by a few MBs

v2.1.0

Fixed

• upstream auto update issue (electron issue)

Added

• Thrift connection pooling
• Support for AWS workstations
• Scan duration to UI
• Automated testing for builds

v2.0.8

Fixes issue with Mac disk encryption check
Fixes auto rescan crash

v2.0.6

Fixes

[#61] lastScanTime does not update from remote scans
[#62] Remove all localhost dependencies
[#63] Stop binding to 'localhost'
[#64] Remove unused Applescript dependency in Mac resolver
Removes excessive osquery logging in dev, can be re-enabled via env vars STETHOSCOPE_DEBUG=osquery
Adds ability to restart app from loading screen
Adds ability to contact help after slow load when restarting
Adds debug info to loading screen on consecutive failure

Enhancements

• Sets minimum scan interval (5 seconds)
• Adds app version to title
• Switched to using fdesetup status instead of osquery to determine disk encryption status
• Fixes to cache mechanism to prevent race condition

v2.0.5

Resolves Mojave instructions issue
Added support for querying Browser instructions documentation

v2.0.3

Changed

• Stethoscope is now a tray/menubar only application!
• Normalized practice names to camelCase between yaml and json
• Closing window collapses app to menubar/tray instead of quitting
• Improved logging

Added

• Automatic scanning (weekly scan by default) - controlled by rescanIntervalSeconds in src/config.json
• Basic support for internationalization (instructions.{LANGUAGE_CODE}.yaml)
• Documentation around policies
• New Mac device versions
• Instructions now display dynamic content via handlebars preprocessing
• Production debugging capabilities
• Basic linux support (requires root)

Fixed

• Improved thrift connection stability and removed magic numbers/timing
• Windows not properly terminating osqueryd on close

Stethoscope v1.2.0

Stethoscope now uses thrift sockets to communicate with osquery instead of shelling out to osqueryi. 🎆

This release also includes:

• major performance improvements on all platforms (scans on Windows app are ~80% faster)
• keyboard shortcuts added to close/open app window and rescan app (Cmd/Ctrl + W/N/R)
• numerous bug fixes
• fix for a drag-and-drop link navigation vulnerability

changelog