osquery @osquery

osquery lets you ask questions about your Linux, Mac, and Windows infrastructure. Intrusion detection, infrastructure reliability, compliance, and more. osquery.io Menlo Park, CA Joined February 2015

Tweets

210
Followers

3K
Following

131
Likes

279

osquery @osquery

2 years ago

Great to see osquery detections provided in a malware analysis report like this!

Bhargav koduru @brkoduru

2 years ago

Great to see osquery detections provided in a malware analysis report like this!

3 58 155 17K 31

0 1 7 2K 0

Here's a little one-liner I like to use with @osquery to figure out what process is listening on a network port when I can't bind my dev server: osqueryi 'select * from processes join listening_ports using (pid) where port = 8080'

3 2 10 1K 2

Zach Wasserman @thezachw

3 years ago

Team @Docker, what's the plan for OSS organizations that use the free team tier with your new pricing announcement (sunsetting the free teams tier)? Are projects like @osquery no longer welcome on the platform?

2 2 4 1K 0

osquery @osquery

3 years ago

🎉 Announcing Osquery 5.3.0! 🎉 Table improvements and bugfixes. Downloads available from osquery.io/downloads/offi…

2 6 20 0 0

Zach Wasserman @thezachw

3 years ago

Anyone know of a tool like @snyksec that supports C++ and can generate *public* reports of dependency vulnerabilities and fixes? Snyk seems to have a nice workflow but doesn't support the public reporting use case. Looking to address this issue for @osquery.

2 1 3 0 0

osquery @osquery

4 years ago

🎉 Announcing osquery 5.2.2 with native macOS M1 support! 🎉 Downloads available in our package repos and at osquery.io/downloads/offi…. Huge effort from @trailofbits, @Smjert, @alessandrogario, @sharvilshah and more.

0 14 38 0 0

osquery @osquery

4 years ago

Osquery is not vulnerable to the Log4J CVE-2021-44228, as there are no Java components. The osquery.io website is statically hosted on GitHub pages.

0 2 10 0 0

osquery @osquery

4 years ago

Announcing, osquery 5.0! 🎉 This is a tremendously exciting release. New code signatures, new paths, new packaging, new functionality! Check it out at github.com/osquery/osquer…

2 11 32 0 2

osquery @osquery

5 years ago

cloudquery looks great! A wonderful complimentary tool to osquery, query your endpoints and your cloud! What’s next? github.com/cloudquery/clo…

0 4 15 0 2

osquery @osquery

5 years ago

Very cool to see the initial talks and speakers added to the agenda, should be a fun and insightful event!

osquery@scale @osqueryatscale

5 years ago

Very cool to see the initial talks and speakers added to the agenda, should be a fun and insightful event!

1 2 5 0 0

Download Image

0 4 10 0 0

osquery @osquery

5 years ago

Keep them coming!

𝙹𝚊𝚟𝚒𝚎𝚛 𝙼𝚊𝚛𝚌𝚘𝚜 ⚡️ @javutin

5 years ago

Keep them coming!

1 25 35 0 4

1 0 6 0 1

osquery @osquery

5 years ago

The osquery ecosystem keeps growing!

Fleet @fleetctl

5 years ago

The osquery ecosystem keeps growing!

0 6 18 0 1

0 4 13 0 0

osquery @osquery

5 years ago

This makes bpf events very accessible: select * from bpf_process_events. You’ll have to build from tip right now, but expect these features in the next stable release (eta 1 month). Next up, EndpointSecurity process events!

Alessandro Gario @alessandrogario

5 years ago

2 2 11 0 2

1 3 21 0 0

osquery @osquery

5 years ago

Here is a great end to end setup for using osquery to carve/acquire files remotely. Thanks for the in-depth description and walkthrough Ben!

Ben Bornholm @CptOfEvilMinion

5 years ago

Here is a great end to end setup for using osquery to carve/acquire files remotely. Thanks for the in-depth description and walkthrough Ben!

1 3 7 0 3

0 0 8 0 0

osquery @osquery

5 years ago

That is a lot of SQL! Congrats to the winners and to everyone who helped organize!

Recon InfoSec @Recon_InfoSec

5 years ago

That is a lot of SQL! Congrats to the winners and to everyone who helped organize!

1 37 100 0 2

Download Image

0 1 5 0 0

Zach Wasserman @thezachw

5 years ago

I'm very excited to release Fleet 3.0.0! We've managed to scale Fleet to over 150k hosts with the new changes, and also introduced some nice new features like Manual Labels. Check it out! #osquery github.com/kolide/fleet/r…

2 16 47 0 1

Sevickson @SKwid345

5 years ago

Enjoyed my first virtual talk at @jupyterthon and also my first blog, hope there will be more! 😉 Thanks again @Cyb3rWard0g & @Cyb3rPandaH for this opportunity. Here is the link to my talk: youtube.com/watch?v=QCVd4S… And also the link to my blog: medium.com/@sevickson/unt… #osquery

0 3 13 0 3

Zach Wasserman @thezachw

6 years ago

Great work from the ToB folks! I blogged an example configuration and results from the ntfs_events table at dactiv.llc/blog/new-in-os…

Trail of Bits @trailofbits

6 years ago

Great work from the ToB folks! I blogged an example configuration and results from the ntfs_events table at dactiv.llc/blog/new-in-os…

1 36 85 0 17

Download Image

0 3 6 0 0

Trail of Bits @trailofbits

6 years ago

Real-time file monitoring on Windows with osquery blog.trailofbits.com/2020/03/16/rea…

1 36 85 0 17

Download Image

Zach Wasserman @thezachw

6 years ago

Did you know #osquery can dump process trees on macOS, Linux, and Windows? With a little SQL magic we can do that and more! dactiv.llc/blog/process-t…