Changelog
Features
- [76158a] feat(release): publish a signed apt repository on each release
- [aa5162] feat(release): publish a signed apt repository on each release (#1182)
Bug Fixes
- [5356f6] fix(asymptote): restart the Beacon Cloud forwarder when the log may have been replaced
- [5fef12] fix(asymptote): restart the Beacon Cloud forwarder when the log may have been replaced (#1198)
- [c1e4c0] fix(endpoint): stop telling Windows users to rerun with sudo
- [611a1e] fix(endpoint): stop telling Windows users to rerun with sudo (#1183)
- [a8f35f] fix(hooks): record Cursor's turn-end status on the stop event
- [aa3f74] fix(hooks): record Cursor's turn-end status on the stop event (#1196)
- [c91918] fix(release): fail closed on a pinned key, fix verify snippet, keep old pin on rotation
- [40c50a] fix(release): tolerate a missing install.sh when finalize has no signing key
Other
- [93c308] Address review: configure only people's logins, keep errors in the old fields
- [404eca] Address review: kernel-pinned identity, exact-connection lookup
- [90c37a] Address review: sock_diag ENOENT fallback, Cowork identity, Falcon HEC
- [690295] Attribute OTLP events to the account that sent them on Linux
- [0cc344] Attribute OTLP events to the account that sent them on Linux (#1204)
- [23bd95] Configure and report every logged-in user on a root system install
- [78481a] Configure and report every logged-in user on a root system install (#1203)
- [a513e7] Leave Claude Cowork events unattributed under peer attribution
- [870efc] Leave Claude Cowork spans and metrics unattributed under peer attribution too
- [f7b2d0] Merge main into feat/apt-repository
- [789775] Merge main into the OTLP peer attribution branch
- [4b0c55] Merge main into the OTLP peer attribution branch
- [fbccb8] Merge origin/main into claude/issue-907-linux-signing
- [061d6c] Merge origin/main into claude/issue-911-otlp-host-check
- [c4a0a1] Merge origin/main into claude/issue-911-otlp-host-check
- [8d9a21] Merge origin/main into claude/issue-911-otlp-host-check
- [7ecf8e] Merge origin/main into claude/issue-911-otlp-host-check
- [d27e49] Merge origin/main into claude/issue-911-otlp-host-check
- [6c4a07] Merge origin/main into claude/issue-911-otlp-host-check
- [6c48ee] Merge origin/main into claude/issue-911-otlp-host-check
- [362f20] Read the postinstall's own output in the rpm smoke lane
- [d9546b] Rewrite the Host header on the Cowork ngrok tunnel
- [f73e89] apt repository: attest every package and sign with both keys in a rotation
- [1d2ed4] apt repository: check the staged tree for the packages it holds
- [46c3d9] apt repository: survive cancelled jobs, partial publishes, rotation and pagination
- [a03a3b] apt repository: trust only goreleaser's attestation of what it built
- [d99f79] apt repository: trust only packages built from this release's history
- [2c9e58] apt: commit the archive signing public key
- [a68dd5] apt: commit the archive signing public key (#1207)
- [9acd3f] docs(linux): import only the pinned key in the manual verify snippet
- [b3ae58] release: confirm the published checksums.txt pair in finalize and retry it in verifiers
- [12cf35] release: fail the checksums signs entry closed and gate the fallback on the key
- [636584] release: make the .deb attestation step non-fatal
- [e07412] release: sign Linux .deb/.rpm and checksums.txt when a key is configured (#921)
- [1e63f5] release: sign Linux packages and checksums.txt when a key is configured
- [83f783] release: sign checksums.txt in GoReleaser so a release is never latest unsigned
- [869da2] security: reject non-loopback Host headers on the OTLP HTTP receiver
- [8bf256] security: reject non-loopback Host headers on the OTLP HTTP receiver (#922)
Installation
Homebrew (macOS/Linux)
:::bash
brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon
Linux (Debian, Ubuntu, Fedora, RHEL)
:::bash
curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.57/install.sh | BEACON_VERSION=1.3.57 bash
Manual Download
Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.
Quick Start
:::bash
beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config
Threat detection rules
beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:
:::bash
beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.57/threat-rules.tar.gz
beacon rules list
beacon scan