Shadow Agent Installation

The Shadow agent is a lightweight process that runs osquery and reports to your Hyprwatch fleet.

Supported Platforms

  • Linux (x86_64, aarch64)
  • macOS (Intel, Apple Silicon)
  • Windows (coming soon)

Requirements

  • Root/admin access (for osquery system queries)
  • Outbound HTTPS access to hyprwatch.cloud
  • Outbound HTTPS access to github.com (for osquery download)

Installation

Linux (with systemd)

curl -sSL https://hyprwatch.cloud/install/YOUR_ORG_TOKEN | sudo sh

macOS

curl -sSL https://hyprwatch.cloud/install/YOUR_ORG_TOKEN | sh

The install script will:

  1. Download the Shadow binary from GitHub Releases
  2. Verify SHA256 checksum
  3. Download osquery if not already installed
  4. Create a systemd service (Linux) or launchd plist (macOS)
  5. Start the agent and enroll with your organization

Management Commands

Upgrade

curl -sSL https://hyprwatch.cloud/install/YOUR_ORG_TOKEN | sudo sh -s -- upgrade

Uninstall

curl -sSL https://hyprwatch.cloud/install/YOUR_ORG_TOKEN | sudo sh -s -- uninstall

Manual Installation

Download the binary directly from GitHub Releases:

https://github.com/hyprwatch/shadow/releases/latest

Then run manually: 

sudo ./shadow --org-token YOUR_ORG_TOKEN --server hyprwatch.cloud