Asymptote-Labs/agent-beacon v1.3.49 on GitHub

Changelog

Other

1e2c324 Merge claude/beacon-fix-a40l94-collector-ingest into claude/beacon-fix-a40l94-hooks-ingest
5e43072 Merge claude/beacon-fix-a40l94-hooks-ingest into claude/beacon-fix-a40l94-install-restricted
aa809f6 Merge claude/beacon-fix-a40l94-install-restricted into claude/beacon-fix-a40l94-docs
e37804f Merge claude/beacon-fix-a40l94-log-modes into claude/beacon-fix-a40l94-collector-ingest
d92eb3b Merge remote-tracking branch 'origin/claude/beacon-fix-a40l94-docs' into claude/beacon-fix-a40l94
4f0354a Merge remote-tracking branch 'origin/main' into claude/beacon-fix-a40l94
5e596b9 Restricted log access for system installs (--log-access restricted) (#1122)
08ba978 asymptoteobserve: restricted access mode for the system runtime log
f5b06ae asymptoteobserve: restricted access mode for the system runtime log (2/6) (#1115)
52dab7c asymptoteobserve: settle an archive only while its path still names the opened file
bd0d5bd asymptoteobserve: settle archives toward the log's mode in both directions
d6b128f asymptoteobserve: settle log archives through a descriptor
9856e9d beacon_ingest: report a serve failure, bound its logging, check the burst
e46639b collector: beacon_ingest extension serves the local ingest socket
caf6ce9 doctor: probe the ingest socket instead of only looking at it
65c624f endpoint: --log-access restricted for system installs
4a5c27e endpoint: keep a restricted log restricted across reinstall and Jamf repair
59034a1 hooks, CLI: send system-log events through the collector when it listens
6753352 lifecycle: fake the root-owned marker in the reinstall test
b251986 localingest: remember a failed send across hook processes; report spooled lines

Installation

Homebrew (macOS/Linux)

brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.49/install.sh | BEACON_VERSION=1.3.49 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.49/threat-rules.tar.gz
beacon rules list
beacon scan