Splunk might be a bit more popular than osquery. We know about 18 links to it since March 2021 and only 18 links to osquery. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
The largest we have successfully deployed is on the OSQuery schema https://osquery.io/ which is 277 tables and lots of business context (malwares, vulnerabilities, Windows registry keys, etc). - Source: Hacker News / 3 months ago
From a self hosted standpoint OSQuery or Wazuh are your best bets for monitoring USB devices. Windows makes blocking really challenging and I’m not aware of any “free” solutions that attempt it. Source: about 1 year ago
Configure auditd to monitor host activity: https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505 or osquery: https://osquery.io/ (or similar software: filebeat for example). Source: about 1 year ago
OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 1 year ago
Osquery + Fleet. https://osquery.io/ https://fleetdm.com/, using the two allows you to build a query to answer what ever questions you (or an auditor) might have about your environment. Source: over 1 year ago
I'm using the free 60day Enterprise license and tried to install different apps from the "Browse more apps" menu in Splunk Enterprise, but it doesn't accept my credentials when I try to log in. I tried my username and password from splunk.com(which I'm sure it works, because I tried it straight away on the official website). Also I tried using my username and password with which I'm accessing Splunk Enterprise,... Source: 5 months ago
I'm noticing a questionable trend in Splunk question/answer structure for these free courses on splunk.com So I go to an exam dump to try and compare to something I have studied thus far. (Prepping for entry level 1002). Source: 6 months ago
With your splunk.com username, you can login to Splunk trainings portals as well https://www.splunk.com/en_us/training.html .. There are lots of free trainings available. Enroll yourself, complete them, you will gain more confidence. Source: 10 months ago
VAST is an open-source SecDataOps project for working with data from open-source security tools. Version 3.0 adds a pipeline syntax similar to splunk, Kusto, PRQL, and Zed. Source: about 1 year ago
I'm entering my correct credentials for splunk.com nothing happends, even tried downloading the tgz file from splunkbase and then going the install app from file route. Nothing happens. No failure message, no app downloading. Please help! Source: about 1 year ago
Tripwire - Open Source Tripwire software is a security and data integrity tool useful for monitoring and...
Datadog - See metrics from all of your apps, tools & services in one place with Datadog's cloud monitoring as a service solution. Try it for free.
Ossec - OSSEC is an Open Source Host-based Intrusion Detection System.
Grafana - Data visualization & Monitoring with support for Graphite, InfluxDB, Prometheus, Elasticsearch and many more databases
AIDE - AIDE (Advanced Intrusion Detection Environment) is a file and directory integrity checker.
Prometheus - An open-source systems monitoring and alerting toolkit.