osquery Reviews and Details

Is osquery good?

Social recommendations and mentions

• Show HN: Network Monitor – a GUI to spot anomalous connections on your Linux

  Cool project, I wish we had more GUIs for these OS functions. How was your experience with GTK4 and Rust? And it's a bit sad that in the year of our lord 2025, the best way to get such fundamental information is by using regexes to parse a table[1], generated by a 6000-line C program[2], which is verified by (I hope I'm wrong!) a tiny test suite[3]. OSQuery[4] is also pretty cool, but it builds upon this fragile... - Source: Hacker News / 8 months ago

• Introducing osquery_hunter — Lightweight Windows Triage Tool for DFIR & Threat Hunting

  That’s where osquery_hunter comes in — a simple Python-based helper that uses osquery to collect process and network data, then flags unsigned or suspicious binaries for rapid triage. - Source: dev.to / 9 months ago

• Fastly and the Linux kernel

  The open source projects Fastly uses and the foundations we partner with are vital to Fastly’s mission and success. Here's an unscientific list of projects and organizations supported by the Linux Foundation that we use and love include: The Linux Kernel, Kubernetes, containerd, eBPF, Falco, OpenAPI Initiative, ESLint, Express, Fastify, Lodash, Mocha, Node.js, Prometheus, Jenkins, OpenTelemetry, Envoy, etcd, Helm,... - Source: dev.to / about 2 years ago

• Show HN: Natural Language to SQL "Text-to-SQL" API by Dataherald

  The largest we have successfully deployed is on the OSQuery schema https://osquery.io/ which is 277 tables and lots of business context (malwares, vulnerabilities, Windows registry keys, etc). - Source: Hacker News / over 2 years ago

• Alternative to Endpoint Protector?

  From a self hosted standpoint OSQuery or Wazuh are your best bets for monitoring USB devices. Windows makes blocking really challenging and I’m not aware of any “free” solutions that attempt it. Source: about 3 years ago

• Firewall rules beyond "deny incoming, enable only the ports that you need"

  Configure auditd to monitor host activity: https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505 or osquery: https://osquery.io/ (or similar software: filebeat for example). Source: about 3 years ago

• Best Websites For Coders

  OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 3 years ago

• Tool that let you know see EXE file on multiple PC?

  Osquery + Fleet. https://osquery.io/ https://fleetdm.com/, using the two allows you to build a query to answer what ever questions you (or an auditor) might have about your environment. Source: over 3 years ago

• is there a version overview application out there?

  May be you can take a look into osquery (never used, but interested on it because I think it provides this kind of information). Source: over 3 years ago

• Steampipe – Select * from Cloud;

  Seems like the next step past https://osquery.io/. - Source: Hacker News / almost 4 years ago

• DBOS: A Database-Oriented Operating System

  Exactly! https://osquery.io is one example that. - Source: Hacker News / almost 4 years ago

• invintory for linux.

  Osquery, with or without fleetdm or kolide. Source: about 4 years ago

• Free tools to inventory linux servers

  As u/dewyke OS Query may do what you need - https://osquery.io/. Source: about 4 years ago

• Recommendations for viewing installed software?

  I would recommend looking at OSQuery. Source: over 4 years ago

• An Osquery Field Guide for Log4J Defenders

  Hey all,- I'm the co-author of this osquery field guide for log4j defenders over on TNS. Happy to answer any questions. If you're not familiar with the open-source osquery project, learn more here. It's glorious. Here's a tl;dr on the queries in the blog post:. Source: over 4 years ago

• How do you admin linux servers?

  For compliance monitoring, some people use tools like osquery and auditd. Source: almost 5 years ago

• Asking nicely for root command execution (and getting it)

  Could be running something like https://osquery.io/. - Source: Hacker News / almost 5 years ago

• Does anyone use osquery in a production setting?

  I've always been interested in the approach taken by osquery but I wonder if it's more than a cool project and if it's usable in practice? Would love feedback :). Source: almost 5 years ago

• Upcoming trends in DevOps and SRE

  Deployment phase - Osquery, Falco and Tripwire. - Source: dev.to / almost 5 years ago

• Is there a way to scan a network for computers running specific software (Java in this case)

  Many options exist. OSQuery is one, and it's free, and it can be used to grab a bunch of other system information which might be useful at a later date. https://osquery.io/. Source: about 5 years ago

• Best Websites Every Programmer Should Visit

  OS Query : Easily ask questions about your Linux, Windows, and macOS infrastructure. - Source: dev.to / over 5 years ago