osquery VS snort

osquery Reviews

snort Reviews

osquery mentions (18)

• Show HN: Natural Language to SQL "Text-to-SQL" API by Dataherald

  The largest we have successfully deployed is on the OSQuery schema https://osquery.io/ which is 277 tables and lots of business context (malwares, vulnerabilities, Windows registry keys, etc). - Source: Hacker News / 3 months ago

• Alternative to Endpoint Protector?

  From a self hosted standpoint OSQuery or Wazuh are your best bets for monitoring USB devices. Windows makes blocking really challenging and I’m not aware of any “free” solutions that attempt it. Source: about 1 year ago

• Firewall rules beyond "deny incoming, enable only the ports that you need"

  Configure auditd to monitor host activity: https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505 or osquery: https://osquery.io/ (or similar software: filebeat for example). Source: about 1 year ago

• Best Websites For Coders

  OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 1 year ago

• Tool that let you know see EXE file on multiple PC?

  Osquery + Fleet. https://osquery.io/ https://fleetdm.com/, using the two allows you to build a query to answer what ever questions you (or an auditor) might have about your environment. Source: over 1 year ago

snort mentions (6)

• Who does check linux distros of malware - open source

  Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata... Source: 5 months ago

• NETGATE 4100 - Snort Fatal Error on new install

  Okay I figured it out. The problem occurs when you're only using the community rules for Snort. If you go to snort.org and register for a free or subscriber "oink" code, enter the code in pfSense and update the rules then it magically works as expected. My best guess is that unicode information get's added when the new rules are updated. At any rate, this worked for me. Source: about 1 year ago

• Trying to learn Rogue Device Detection

  Snort (not an insult) https://snort.org/. Source: almost 2 years ago

• Snort Subscriber Ruleset - Not Downloaded - error code 422 - md5 download failed

  422 supposedly means the requested file doesn't exist, and sure enough if you look on the snort.org rules downloads page there is no file for version 29180. Source: over 2 years ago

• Unable to Install OpenAppID on Ubuntu Server 18.04

  Where did you get the sourcecode you are building from? The snort3_extra-3.1.0.0.tar.gz package from the snort.org website doesn't have this stuff in appid_listener_event_handler.cc. Source: about 3 years ago