Asymptote-Labs/agent-beacon v1.3.58 on GitHub

Changelog

Other

d7822b0 Address review: Fleet wrapper settings, automation sudo, Installer.app check
909437d Address review: Windows account names and supervised MSI installs
2a4b7c4 Address review: dashboard switch for accounts that cannot read config.json
c711ff6 Address review: settings reach both steps, safer restricted default
2daa8bd Attribute OTLP events to the account that sent them on macOS and Windows (#1211)
b77cc18 Attribute OTLP exports to their sender on macOS and Windows
1eb95c8 CleanPart now returns "" when the value still contains a / after trimming.
f76dd0f CleanPart now returns "" when the value still contains a / after trimming. (#1209)
f773d61 Dashboard: per-launch secret and an administrator off switch
93cb1c5 Dashboard: per-launch secret and an administrator off switch (#1212)
3e68c4c Fix the macOS install script's log-readers block after the rebase
0bb7526 Install scripts: read BEACON_LOG_ACCESS in any case, as the CLI does
7833dc7 Keep the settings file's Splunk token out of per-user processes
dd9e37b Linux installs: detect a person by the controlling terminal, not stdin
2313c69 Merge main (#1211, peer attribution on macOS and Windows) into the restricted-by-default install branch
27241a0 Merge main into the restricted-by-default Linux install branch
eb41eab Merge main into the restricted-by-default Linux package branch
9e12695 Merge remote-tracking branch 'origin/main' into claude/beacon-system-install-attribution-0cqfvg
0ec860f Read the postinstall's own output in the rpm smoke lane
068e367 Remove the dashboard marker on every uninstall, and roll it back
f33ee87 Restrict the system log on a first Linux package install
7e7ae34 Restrict the system log on first package installs on macOS and Windows too
6f5376c Restricted system log on first package installs, with fleet settings, on Linux, macOS and Windows (#1202)
9814e73 Roll back the log a failed first install created, so a retry is still first
7bfae27 Windows marker tests: protect the fixture directory's DACL
ecb128b collector: bound components when a child holds its pipe; fast ci fakes
f04c078 collector: render peer attribution on macOS and Windows only for a capable collector
03d258c loggroup: read net.exe's error number only from its own output
c0d321d peercred: refuse closed client rows in the Windows TCP table
e4bedbe release signing: accept sqv, harden the apt key steps, fix stale comments
1adad80 release: pin the Linux release key and document the apt repository
ec24e31 release: pin the Linux release key and document the apt repository (#1210)
3dbd1e9 selfupdate: compute the apt key's fingerprint in Go, not with gpg

Installation

Homebrew (macOS/Linux)

brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.58/install.sh | BEACON_VERSION=1.3.58 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.58/threat-rules.tar.gz
beacon rules list
beacon scan