Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
Snippets Groups Projects
Commit f060fd20 authored by thl-cmk's avatar thl-cmk :flag_na:
Browse files

Update HOWTO.md

parent 13cb23e6
No related branches found
No related merge requests found
......@@ -377,36 +377,40 @@ It wil then add all files affected by this CVE to the service. The information i
| scanner option | bakery option | comment |
| ------ | ------ | ------ |
| target_path1 to n | Search method -> Search paths |
| -f [config_file_path] | Search method -> Search paths (bulk) | cve_2021_44228_log4j_search.cfg |
| --scan-log4j1 | Scan for log4j 1 versions (CVE-2021-4104) |
| --scan-logback | Scan for logback (CVE-2021-42550) | |
| --scan-zip | Scan zip files (increase timeout) |
| --force-fix | Fix files and backup -> Fix files. (Use at your own risk!) | Option was removed |
| --backup-path | Fix files and backup -> Backup directory (must exist) | Option was removed |
| --all-drives | Search method -> All drives | Windows only |
| --api-key | Use Logpresso watch -> Logpresso watch API key | |
| --backup-path | Fix files and backup -> Backup directory (must exist) | Option was removed |
| --csv-log-path | Append results to log file -> Log file format -> CSV |
| --debug | Debug scanner |
| --drives | Search method -> Drives to scan | Windows only |
| --no-symlink | Ignore symlinks | Linux only |
| --exclude [path_prefix] | Exclude paths -> Exclude paths -> Exclude paths |
| --exclude-config [config_file_path] | Exclude paths -> Exclude paths -> Exclude paths (bulk) | cve_2021_44228_log4j_exclude.cfg |
| --exclude-pattern [pattern] | Exclude paths -> Exclude paths by pattern |
| --exclude-file-config [config_file_path] | Exclude files (bulk) | cve_2021_44228_log4j_exclude_files.cfg |
| --exclude-fs | Exclude filesystems by type |
| --syslog-udp [host:port] | Enable syslog reporting -> Syslog server / Syslog server Port |
| --syslog-level [level] | Enable syslog reporting -> Loglevel |
| --syslog-facility [code] | Enable syslog reporting -> Facility |
| --rfc5424 | Enable syslog reporting -> Use RFC5424 syslog format |
| --exclude-pattern [pattern] | Exclude paths -> Exclude paths by pattern |
| -f [config_file_path] | Search method -> Search paths (bulk) | cve_2021_44228_log4j_search.cfg |
| --force-fix | Fix files and backup -> Fix files. (Use at your own risk!) | Option was removed |
| --http-proxy | Use Logpresso watch-> Use a http proxy server | |
| --json-log-path | Append results to log file -> Log file format -> JSON |
| --no-empty-report | Enable reporting -> Enable file reporting -> Don't create empty reports |
| --no-symlink | Ignore symlinks | Linux only |
| --report-csv | Enable reporting -> Enable file reporting -> Report format -> CSV |
| --report-dir | Enable reporting -> Enable file reporting -> Report output directory (must exist) |
| --report-json | Enable reporting -> Enable file reporting -> Report format -> JSON |
| --report-patch | Report safe files | |
| --report-path | Enable reporting -> Send report to checkmk | log4j_report.json |
| --report-dir | Enable reporting -> Enable file reporting -> Report output directory (must exist) |
| --no-empty-report | Enable reporting -> Enable file reporting -> Don't create empty reports |
| --csv-log-path | Append results to log file -> Log file format -> CSV |
| --json-log-path | Append results to log file -> Log file format -> JSON |
| --rfc5424 | Enable syslog reporting -> Use RFC5424 syslog format |
| --scan-log4j1 | Scan for log4j 1 versions (CVE-2021-4104) |
| --scan-logback | Scan for logback (CVE-2021-42550) | |
| --scan-zip | Scan zip files (increase timeout) |
| --silent | Silent output |
| --debug | Debug scanner |
| --syslog-facility [code] | Enable syslog reporting -> Facility |
| --syslog-level [level] | Enable syslog reporting -> Loglevel |
| --syslog-udp [host:port] | Enable syslog reporting -> Syslog server / Syslog server Port |
| --throttle | Throttle |
| -Xmx | Max memory |
| --trace | Trace scanner | Removed, produces to much data |
| -Xmx | Max memory |
</details>
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment