Shadow Agent Installation

The shadow agent is a lightweight process that runs osquery and reports to your Hyprwatch fleet.

Requirements

• Linux (x86_64 or aarch64)
• Root access (for osquery system queries)
• Outbound HTTPS access to hyprwatch.cloud

Installation

The easiest way to install is using the one-line installer. Replace YOUR_ORG_TOKEN with your organization's enrollment token from the dashboard.

curl -sSL https://hyprwatch.cloud/install/YOUR_ORG_TOKEN | sudo sh

This script will:

1. Download the shadow binary for your architecture
2. Download osquery if not already installed
3. Create a systemd service
4. Start the agent and enroll with your organization

Manual Installation

If you prefer to install manually, download the binary from the releases page:

wget https://hyprwatch.cloud/releases/shadow-linux-x86_64

chmod +x shadow-linux-x86_64

sudo mv shadow-linux-x86_64 /usr/local/bin/shadow

Then run with your organization token:

sudo shadow --org-token YOUR_ORG_TOKEN --server hyprwatch.cloud