osquery VS ClamAV

The largest we have successfully deployed is on the OSQuery schema https://osquery.io/ which is 277 tables and lots of business context (malwares, vulnerabilities, Windows registry keys, etc). - Source: Hacker News / 3 months ago

From a self hosted standpoint OSQuery or Wazuh are your best bets for monitoring USB devices. Windows makes blocking really challenging and I’m not aware of any “free” solutions that attempt it. Source: 12 months ago

Configure auditd to monitor host activity: https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505 or osquery: https://osquery.io/ (or similar software: filebeat for example). Source: about 1 year ago

OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 1 year ago

Osquery + Fleet. https://osquery.io/ https://fleetdm.com/, using the two allows you to build a query to answer what ever questions you (or an auditor) might have about your environment. Source: over 1 year ago

As for detecting or scanning you can use some tools like ClamAV. Source: about 1 year ago

My virus defs have been failing for 2 weeks now. If I have a TVS-872XT what do I choose from clamav.net to update it manually or regularly? Or any other sources I should consider for auto updating? Source: about 2 years ago

None of this works. clamav.net doesn't allow for manual downloads. You are immediately banned if you try. Source: about 2 years ago

Http://clamav.net if you really need one. Source: over 2 years ago

With Windows Subsystem for Linux becoming more popular its becoming smarter to think about an AV on Linux, clamav.net is what I use, its awesome, lightweight, runs in a docker container too so its super easy to setup... Just dont forget to setup scanning on a regular basis or it'll be of no use at all. Source: over 2 years ago