Asymptote-Labs/agent-beacon v1.3.52 on GitHub

Changelog

Bug Fixes

b6439f2 fix(privacy): redact secrets that directly follow another secret (#1153)

Other

ff82704 Forward OTLP to a second backend, and a Kandji + GCS guide for it (#1156)
fd500a5 Forward OTLP to a second backend, and a Kandji guide for it
74fdc9e OTLP forward: filter to Claude Code and Codex, redact, bound, keep headers out of config.json
dabb3ed OTLP forward: keep Codex token counts, keep headers through reinstall
58efd70 OTLP forward: missing-headers warning restates the whole forward
68aac8e OTLP forward: quote harness names in the collector config
4bd2127 Uninstall removes the OTLP forward headers even without a manifest
974dd34 Windows: create credential-bearing system files SYSTEM/Administrators only
e098990 Windows: create credential-bearing system files SYSTEM/Administrators only (#1157)
71284ab Windows: doctor repair rollback restores credential files with their DACL
bed5901 Windows: keep config.json private when the auto-update mode is rewritten
5e51c08 Windows: keep credential files private through MSI uninstall and malformed config
36d9162 Windows: rollback restores credential files with their SYSTEM/Administrators DACL
2ddb9c1 docs(cloud): the GCS helper grants objectUser, not upload-only
49e5411 docs(kandji): GCS plus the OTLP forward in one Kandji guide
06cbdb6 docs(kandji): bash 3.2-safe header loop in the OTLP forward script
4037582 docs(runtimes): endpoint install already writes the hooks
b2b84ea docs(runtimes): fix the discovery and coverage tables
efbfef4 docs(runtimes): make the runtime pages match what the code does (#1154)
26ed0d6 sysacl: gofmt secret_windows.go imports
a41f3d7 tests: neutral example values for the OTLP forward
0f914d2 uninstall-endpoint.ps1: protected copy works under PowerShell 7 too

Installation

Homebrew (macOS/Linux)

brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.52/install.sh | BEACON_VERSION=1.3.52 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.52/threat-rules.tar.gz
beacon rules list
beacon scan