News for hackers. Stuff that matters.

A comment on Osquery: An sqlite3 virtual table exposing operating system data to SQL. Parent comment

Re:Osquery: An sqlite3 virtual table exposing operating syst... by jeffbee on Sunday February 25, 2024 @11:00AM (#39501844)
I don't feel like I need to be nice to Facebook.

The raison d'etre of this thing is to allow interactive ad hoc exploration of large-scale systems. It is, in other words, a thoroughly bad idea.

[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by convolvatron on Sunday February 25, 2024 @11:10AM (#39501929)
there may be problems with the implementation, or its usage, but I don't see why that's fundamentally a bad idea at all
[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by mikermcneil on Sunday February 25, 2024 @06:44PM (#39506153)
(used in production directly or via major EDRs by much of silicon valley, governments, and the F1000)

Contributions: https://github.com/osquery/osquery

[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by mikermcneil on Sunday February 25, 2024 @06:48PM (#39506191)
osquery after Meta: https://devops.com/the-linux-foundation-breathes-new-life-in...
[ Parent | on HN ]