Skip to content
This repository was archived by the owner on Jun 6, 2025. It is now read-only.

Commit 035aef9

Browse files
tas50misterpantz
andauthored
Remove Retrieve from more query names (#116)
This makes this display better in the data queries tab --------- Signed-off-by: Tim Smith <[email protected]> Co-authored-by: Letha <[email protected]>
1 parent 6484f5d commit 035aef9

9 files changed

+69
-69
lines changed

core/mondoo-gcp-inventory.mql.yaml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ packs:
1919
- asset.platform == "gcp" || asset.platform == "gcp-project"
2020
queries:
2121
- uid: mondoo-asset-inventory-gcp-project-info
22-
title: Retrieve GCP Project Information
22+
title: GCP Project Information
2323
mql: |
2424
gcp.project {
2525
name
@@ -29,68 +29,68 @@ packs:
2929
labels
3030
}
3131
- uid: mondoo-asset-inventory-gcp-project-owners
32-
title: Retrieve data for all owners of the GCP project
32+
title: GCP project owners
3333
docs:
3434
desc: |
3535
This query retrieves data for all owners of the GCP project
3636
mql: gcp.project.iamPolicy.where( role == "roles/owner" )
3737
- uid: mondoo-asset-inventory-gcp-project-editors
38-
title: Retrieve data for all editors of the GCP project
38+
title: GCP project editors
3939
docs:
4040
desc: |
4141
This query retrieves data for all editors of the GCP project
4242
mql: gcp.project.iamPolicy.where( role == "roles/editors" )
4343
- uid: mondoo-asset-inventory-gcp-iam-roles
44-
title: Retrieve all IAM Policy roles for the GCP project
44+
title: IAM Policy roles
4545
docs:
4646
desc: |
4747
This query retrieves all roles defined for a GCP project
4848
mql: gcp.project.iamPolicy { role }
4949
- uid: mondoo-asset-inventory-gcp-enabled-services
50-
title: Retrieve all services enabled in the GCP project
50+
title: Services enabled in the GCP project
5151
docs:
5252
desc: |
5353
This query retrieves all services enabled in the GCP Project
5454
mql: gcp.project.services.where( enabled == true )
5555
- uid: mondoo-asset-inventory-gcp-gke-clusters-count
56-
title: Retrieve count of GKE clusters in a GCP project
56+
title: GKE clusters count
5757
docs:
5858
desc: |
5959
This query retrieves a count of GKE clusters running in a GCP project
6060
mql: gcp.project.gke.clusters.length
6161
- uid: mondoo-asset-inventory-gcp-gke-clusters-data
62-
title: Retrieve data on GKE clusters
62+
title: GKE clusters configuration
6363
docs:
6464
desc: |
6565
This query retrieves all of the configuration data for GKE clusters within a project
6666
mql: gcp.project.gke.clusters
6767
- uid: mondoo-asset-inventory-gcp-compute-instances-count
68-
title: Retrieve a count of GCP compute instances in a GCP project
68+
title: GCP compute instances count
6969
docs:
7070
desc: |
7171
This query retrieves a count of running GCP compute instances in a GCP project
7272
mql: gcp.compute.instances.where( status == "RUNNING" ).length
7373
- uid: mondoo-asset-inventory-gcp-compute-instances-data
74-
title: Retrieve data from all running GCP compute instances in a GCP project
74+
title: GCP compute instances
7575
docs:
7676
desc: |
7777
This query retrieves the data for all running GCP compute instances in a GCP project
7878
mql: gcp.compute.instances.where( status == "RUNNING" )
7979
- uid: mondoo-asset-inventory-gcp-compute-instances-public
80-
title: Retrieve data on public GCP Compute Engine instances
80+
title: GCP Compute Engine instances
8181
docs:
8282
desc: |
8383
This query retrieves the data for all GCP Compute Engine instances that have been configured with an external IP address.
8484
mql: |
8585
gcp.compute.instances.where( networkInterfaces[0]['accessConfigs'][0]['name'] == "External NAT" )
8686
- uid: mondoo-asset-inventory-gcp-compute-networks-count
87-
title: Retrieve a count of GCP Compute Engine networks in a GCP project
87+
title: GCP Compute Engine networks count
8888
docs:
8989
desc: |
9090
This query retrieves a count of GCP Compute Engine networks configured in a GCP project
9191
mql: gcp.compute.networks.length
9292
- uid: mondoo-asset-inventory-gcp-compute-networks-data
93-
title: Retrieve data for all GCP Compute Engine networks in a GCP project
93+
title: GCP Compute Engine networks
9494
docs:
9595
desc: |
9696
This query retrieves the data for all GCP Compute Engine networks configured in a GCP project.

core/mondoo-kubernetes-incident-response.mql.yaml

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ packs:
1818
- asset.platform == "kubernetes" || asset.platform == "k8s-cluster"
1919
queries:
2020
- uid: mondoo-kubernetes-incident-response-cluster-version
21-
title: Retrieve Kubernetes Cluster Version
21+
title: Kubernetes Cluster Version
2222
mql: |
2323
k8s.serverVersion
2424
- uid: mondoo-kubernetes-incident-response-role-bindings-with-cluster-admin-permissions
25-
title: Retrieve role bindings with cluster-admin permissions
25+
title: Role bindings with cluster-admin permissions
2626
mql: |
2727
k8s.rolebindings.where(roleRef["kind"] == "ClusterRole" && roleRef["name"] == "cluster-admin") {
2828
name
@@ -31,7 +31,7 @@ packs:
3131
roleRef
3232
}
3333
- uid: mondoo-kubernetes-incident-response-clusterrole-bindings-with-cluster-admin-permissions
34-
title: Retrieve ClusterRoleBindings with cluster-admin permissions
34+
title: ClusterRoleBindings with cluster-admin permissions
3535
mql: |
3636
k8s.clusterrolebindings.where(roleRef["kind"] == "ClusterRole" && roleRef["name"] == "cluster-admin") {
3737
name
@@ -43,7 +43,7 @@ packs:
4343
- asset.platform == "k8s-pod"
4444
queries:
4545
- uid: mondoo-kubernetes-incident-response-pod-security-context
46-
title: Retrieve Pod Security Context
46+
title: Pod Security Context
4747
mql: |
4848
k8s.pod {
4949
ephemeralContainers {
@@ -57,7 +57,7 @@ packs:
5757
}
5858
}
5959
- uid: mondoo-kubernetes-incident-response-pod-container
60-
title: Retrieve container image information
60+
title: Container image information
6161
mql: |
6262
k8s.pod {
6363
name
@@ -105,7 +105,7 @@ packs:
105105
- asset.platform == "k8s-deployment"
106106
queries:
107107
- uid: mondoo-kubernetes-incident-response-deployment-security-context
108-
title: Retrieve Deployment Security Context
108+
title: Deployment Security Context
109109
mql: |
110110
k8s.deployment {
111111
initContainers {
@@ -116,7 +116,7 @@ packs:
116116
}
117117
}
118118
- uid: mondoo-kubernetes-incident-response-deployment-container
119-
title: Retrieve container image information
119+
title: Container image information
120120
mql: |
121121
k8s.deployment {
122122
name
@@ -151,7 +151,7 @@ packs:
151151
- asset.platform == "k8s-cronjob"
152152
queries:
153153
- uid: mondoo-kubernetes-incident-response-cronjob-security-context
154-
title: Retrieve CronJob Security Context
154+
title: CronJob Security Context
155155
mql: |
156156
k8s.cronjob {
157157
initContainers {
@@ -162,7 +162,7 @@ packs:
162162
}
163163
}
164164
- uid: mondoo-kubernetes-incident-response-cronjob-container
165-
title: Retrieve container image information
165+
title: Container image information
166166
mql: |
167167
k8s.cronjob {
168168
name
@@ -197,7 +197,7 @@ packs:
197197
- asset.platform == "k8s-job"
198198
queries:
199199
- uid: mondoo-kubernetes-incident-response-job-security-context
200-
title: Retrieve Job Security Context
200+
title: Job Security Context
201201
mql: |
202202
k8s.job {
203203
initContainers {
@@ -208,7 +208,7 @@ packs:
208208
}
209209
}
210210
- uid: mondoo-kubernetes-incident-response-job-container
211-
title: Retrieve container image information
211+
title: Container image information
212212
mql: |
213213
k8s.job {
214214
name
@@ -243,7 +243,7 @@ packs:
243243
- asset.platform == "k8s-daemonset"
244244
queries:
245245
- uid: mondoo-kubernetes-incident-response-daemonset-security-context
246-
title: Retrieve DaemonSet Security Context
246+
title: DaemonSet Security Context
247247
mql: |
248248
k8s.daemonset {
249249
initContainers {
@@ -254,7 +254,7 @@ packs:
254254
}
255255
}
256256
- uid: mondoo-kubernetes-incident-response-daemonset-container
257-
title: Retrieve container image information
257+
title: Container image information
258258
mql: |
259259
k8s.daemonset {
260260
name
@@ -289,7 +289,7 @@ packs:
289289
- asset.platform == "k8s-statefulset"
290290
queries:
291291
- uid: mondoo-kubernetes-incident-response-statefulset-security-context
292-
title: Retrieve StatefulSet Security Context
292+
title: StatefulSet Security Context
293293
mql: |
294294
k8s.statefulset {
295295
initContainers {
@@ -300,7 +300,7 @@ packs:
300300
}
301301
}
302302
- uid: mondoo-kubernetes-incident-response-statefulset-container
303-
title: Retrieve container image information
303+
title: Container image information
304304
mql: |
305305
k8s.statefulset {
306306
name
@@ -335,7 +335,7 @@ packs:
335335
- asset.platform == "k8s-replicaset"
336336
queries:
337337
- uid: mondoo-kubernetes-incident-response-replicaset-security-context
338-
title: Retrieve ReplicaSet Security Context
338+
title: ReplicaSet Security Context
339339
mql: |
340340
k8s.replicaset {
341341
initContainers {
@@ -346,7 +346,7 @@ packs:
346346
}
347347
}
348348
- uid: mondoo-kubernetes-incident-response-replicaset-container
349-
title: Retrieve container image information
349+
title: Container image information
350350
mql: |
351351
k8s.replicaset {
352352
name

core/mondoo-linux-incident-response.mql.yaml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16,34 +16,34 @@ packs:
1616
- asset.family.contains("linux")
1717
queries:
1818
- uid: mondoo-linux-incident-response-installed-kernel
19-
title: Retrieve installed Linux kernels
19+
title: Installed Linux kernels
2020
filters: mondoo.capabilities.contains("run-command")
2121
mql: kernel.installed
2222
- uid: mondoo-linux-kernel-info
23-
title: Retrieve the running Linux kernel
23+
title: Running Linux kernel
2424
filters: mondoo.capabilities.contains("run-command")
2525
mql: kernel.info
2626
- uid: mondoo-linux-kernel-modules
27-
title: Retrieve Linux kernel modules
27+
title: Linux kernel modules
2828
mql: kernel.modules { name loaded }
2929
- uid: mondoo-linux-incident-response-processes
30-
title: Retrieve running processes
30+
title: Running processes
3131
filters: mondoo.capabilities.contains("run-command")
3232
mql: processes { pid command }
3333
- uid: mondoo-linux-mounts
34-
title: Retrieve mounted devices
34+
title: Mounted devices
3535
mql: mount.list { path fstype device options }
3636
- uid: mondoo-linux-listening-ports
37-
title: Retrieve all listening ports
37+
title: All listening ports
3838
filters: mondoo.capabilities.contains("run-command")
3939
mql: ports.listening
4040
- uid: mondoo-linux-uptime
41-
title: Retrieve operating system uptime
41+
title: Operating system uptime
4242
filters: mondoo.capabilities.contains("run-command")
4343
mql: os.uptime
4444
- uid: mondoo-linux-installed-packages
45-
title: Retrieve installed packages
45+
title: Installed packages
4646
mql: packages { name version arch installed }
4747
- uid: mondoo-linux-running-services
48-
title: Retrieve running services
48+
title: Running services
4949
mql: services { name running enabled masked type }

core/mondoo-macos-incident-response.mql.yaml

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -16,35 +16,35 @@ packs:
1616
- asset.platform == "macos"
1717
queries:
1818
- uid: mondoo-macos-incident-response-platform-info
19-
title: Retrieve platform information
19+
title: Platform information
2020
mql: asset { platform title version arch }
2121
- uid: mondoo-macos-incident-response-regular-users
22-
title: Retrieve regular users
22+
title: Regular users
2323
mql: users.where( name != /^_/ && shell != /\/usr\/bin\/false/ )
2424
- uid: mondoo-macos-incident-response-kernel-info
25-
title: Retrieve the running macOS kernel
25+
title: Running macOS kernel
2626
mql: kernel.info["version"]
2727
- uid: mondoo-macos-incident-response-kernel-modules
28-
title: Retrieve macOS kernel modules
28+
title: macOS kernel modules
2929
mql: kernel.modules { name loaded }
3030
- uid: mondoo-macos-incident-response-processes
31-
title: Retrieve running processes
31+
title: Running processes
3232
mql: processes.list { pid command }
3333
- uid: mondoo-macos-incident-response-mounts
34-
title: Retrieve mounted devices
34+
title: Mounted devices
3535
mql: mount.list
3636
- uid: mondoo-macos-incident-response-uptime
37-
title: Retrieve operating system uptime
37+
title: Operating system uptime
3838
mql: os.uptime
3939
- uid: mondoo-macos-incident-response-installed-packages
40-
title: Retrieve installed packages
40+
title: Installed packages
4141
mql: packages
4242
- uid: mondoo-macos-incident-response-running-services
43-
title: Retrieve running services
43+
title: Running services
4444
mql: services
4545
- uid: mondoo-macos-incident-response-alf-extensions
46-
title: Retrieve exceptions from the Application Layer Firewall
46+
title: Exceptions from the Application Layer Firewall
4747
mql: macos.alf.exceptions
4848
- uid: mondoo-macos-incident-response-check-recommended-updates
49-
title: Retrieve any recommended updates
49+
title: Recommended OS and application updates
5050
mql: parse.plist('/Library/Preferences/com.apple.SoftwareUpdate.plist').params['RecommendedUpdates']

core/mondoo-openssl-incident-response.mql.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,18 @@ packs:
1616
- asset.family.contains("linux")
1717
queries:
1818
- uid: mondoo-openssl-incident-response-platform
19-
title: Retrieve platform details
19+
title: Platform details
2020
mql: |
2121
asset {
2222
platform
2323
version
2424
arch
2525
}
2626
- uid: mondoo-openssl-incident-response-installed-version
27-
title: Retrieve installed ssl libraries
27+
title: Installed ssl libraries
2828
mql: packages.where(name == /ssl/)
2929
- uid: mondoo-openssl-incident-response-listening-ports
30-
title: Retrieve listening ports from running systems
30+
title: Listening ports for running systems
3131
mql: |
3232
if ( mondoo.capabilities.contains('run-command') ) {
3333
ports.listening {

core/mondoo-vmware-incident-response.mql.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -35,27 +35,27 @@ packs:
3535
- asset.platform == "vmware-esxi"
3636
queries:
3737
- uid: mondoo-vmware-incident-response-kernel-modules
38-
title: Retrieve kernel modules
38+
title: Kernel modules
3939
mql: vsphere.host.kernelModules
4040
- uid: mondoo-vmware-incident-response-installed-packages
41-
title: Retrieve installed packages
41+
title: Installed packages
4242
mql: vsphere.host.packages
4343
- uid: mondoo-vmware-incident-response-running-services
44-
title: Retrieve all services
44+
title: All services
4545
mql: vsphere.host.services
4646
refs:
4747
- title: VMSA-2021-0002
4848
url: https://www.vmware.com/security/advisories/VMSA-2021-0002.html
4949
- title: How to Disable/Enable the SLP Service on VMware ESXi (76372)
5050
url: https://kb.vmware.com/s/article/76372
5151
- uid: mondoo-vmware-incident-response-acceptance-level
52-
title: Retrieve host acceptance level
52+
title: Host acceptance level
5353
docs:
5454
desc: The host acceptance level determines which VIBs can be installed on a host.
5555
mql: vsphere.host.acceptanceLevel
5656
refs:
5757
- title:
5858
url: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.upgrade.doc/GUID-27BBBAB8-01EA-4238-8140-1C3C3EFC0AA6.html
5959
- uid: mondoo-vmware-incident-response-ntp-servers
60-
title: Retrieve all configured NTP servers
60+
title: Configured NTP servers
6161
mql: vsphere.host.ntp.server

0 commit comments

Comments
 (0)