News for hackers. Stuff that matters.

A comment on Osquery: An sqlite3 virtual table exposing operating system data to SQL. Parent comment

Re:Osquery: An sqlite3 virtual table exposing operating syst... by foobiekr on Sunday February 25, 2024 @11:17AM (#39501994)
Everyone who has experienced osquery in production when mandated from above and used by less qualified admins knew exactly what he was getting at and the simple truth of it.
[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by w0de0 on Sunday February 25, 2024 @11:19AM (#39502017)
I’ve used it. At large enterprises with sophisticated deployments. I disagree.
[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by dherder on Sunday February 25, 2024 @06:50PM (#39506200)
osquery has a huge span of use cases and has deep roots in system native apis, checkout a recent development in file access monitoring with osquery: https://material.security/blog/protecting-the-security-and-p....
[ Parent | on HN ]
Re:Osquery: An sqlite3 virtual table exposing operating syst... by mikermcneil on Sunday February 25, 2024 @06:22PM (#39506012)
Having paved roads helps: https://github.com/fleetdm/fleet
[ Parent | on HN ]