Asymptote-Labs/agent-beacon v1.3.55 on GitHub

Changelog

Bug Fixes

d5da6ed fix(privacy): redact provider and platform keys that have no label beside them
217b7ba fix(privacy): redact provider and platform keys that have no label beside them (#1192)

Other

2fb3893 docs(readme): replace the trending badge with Trendshift's
f9dc5fb docs(readme): replace the trending badge with Trendshift's (#1185)
5216e22 sentinel: a managed Vector forwarder to Microsoft Sentinel, on every platform
64cdcf3 sentinel: a managed Vector forwarder to Microsoft Sentinel, on every platform (#1188)
0e2f4fc sentinel: carry the credential as Vector pastes it, quotes and all
f731b3c sentinel: check a certificate's password the way Vector will use it
7ce2ca4 sentinel: dollars in a credential, a stuck service, a moved log
2b81b59 sentinel: keep the forwarder's Vector and service across a rejected reconcile
a7dc485 sentinel: pin the PFX encodings Vector reads; OS-neutral Vector path test
203f33b sentinel: register on --no-start installs, leave others' services, keep a chosen Vector
34aac92 sentinel: remove a forwarder service that never started
f3f7f70 service: a forwarder that will not stop is ended and deleted
dae39ea service: also end a forwarder that reports STOPPED but keeps running
44c4a2b service: forwarders carry a spec, and can run as a Windows service
ec6a890 service: forwarders carry a spec, and can run as a Windows service (#1187)
e76a15b service: wait for the SCM to see an ended forwarder before starting it
e5556be windows: ship Vector in the MSI
98836a3 windows: ship Vector in the MSI (#1186)

Installation

Homebrew (macOS/Linux)

brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.55/install.sh | BEACON_VERSION=1.3.55 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.55/threat-rules.tar.gz
beacon rules list
beacon scan