osquery Reviews and details

Social recommendations and mentions

• Fastly and the Linux kernel

  The open source projects Fastly uses and the foundations we partner with are vital to Fastly’s mission and success. Here's an unscientific list of projects and organizations supported by the Linux Foundation that we use and love include: The Linux Kernel, Kubernetes, containerd, eBPF, Falco, OpenAPI Initiative, ESLint, Express, Fastify, Lodash, Mocha, Node.js, Prometheus, Jenkins, OpenTelemetry, Envoy, etcd, Helm,... - Source: dev.to / 4 months ago

• Show HN: Natural Language to SQL "Text-to-SQL" API by Dataherald

  The largest we have successfully deployed is on the OSQuery schema https://osquery.io/ which is 277 tables and lots of business context (malwares, vulnerabilities, Windows registry keys, etc). - Source: Hacker News / 8 months ago

• Alternative to Endpoint Protector?

  From a self hosted standpoint OSQuery or Wazuh are your best bets for monitoring USB devices. Windows makes blocking really challenging and I’m not aware of any “free” solutions that attempt it. Source: over 1 year ago

• Firewall rules beyond "deny incoming, enable only the ports that you need"

  Configure auditd to monitor host activity: https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505 or osquery: https://osquery.io/ (or similar software: filebeat for example). Source: over 1 year ago

• Best Websites For Coders

  OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 1 year ago

• Tool that let you know see EXE file on multiple PC?

  Osquery + Fleet. https://osquery.io/ https://fleetdm.com/, using the two allows you to build a query to answer what ever questions you (or an auditor) might have about your environment. Source: over 1 year ago

• is there a version overview application out there?

  May be you can take a look into osquery (never used, but interested on it because I think it provides this kind of information). Source: almost 2 years ago

• Steampipe – Select * from Cloud;

  Seems like the next step past https://osquery.io/. - Source: Hacker News / about 2 years ago

• DBOS: A Database-Oriented Operating System

  Exactly! https://osquery.io is one example that. - Source: Hacker News / about 2 years ago

• invintory for linux.

  Osquery, with or without fleetdm or kolide. Source: over 2 years ago

• Free tools to inventory linux servers

  As u/dewyke OS Query may do what you need - https://osquery.io/. Source: over 2 years ago

• Recommendations for viewing installed software?

  I would recommend looking at OSQuery. Source: over 2 years ago

• An Osquery Field Guide for Log4J Defenders

  Hey all,- I'm the co-author of this osquery field guide for log4j defenders over on TNS. Happy to answer any questions. If you're not familiar with the open-source osquery project, learn more here. It's glorious. Here's a tl;dr on the queries in the blog post:. Source: over 2 years ago

• How do you admin linux servers?

  For compliance monitoring, some people use tools like osquery and auditd. Source: about 3 years ago

• Asking nicely for root command execution (and getting it)

  Could be running something like https://osquery.io/. - Source: Hacker News / about 3 years ago

• Does anyone use osquery in a production setting?

  I've always been interested in the approach taken by osquery but I wonder if it's more than a cool project and if it's usable in practice? Would love feedback :). Source: about 3 years ago

• Upcoming trends in DevOps and SRE

  Deployment phase - Osquery, Falco and Tripwire. - Source: dev.to / about 3 years ago

• Is there a way to scan a network for computers running specific software (Java in this case)

  Many options exist. OSQuery is one, and it's free, and it can be used to grab a bunch of other system information which might be useful at a later date. https://osquery.io/. Source: over 3 years ago

• Best Websites Every Programmer Should Visit

  OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 3 years ago