Osquery: An sqlite3 virtual table exposing operating system data to SQL

Re:Osquery: An sqlite3 virtual table exposing operating syst... by lopkeny12ko on Sunday February 25, 2024 @11:48AM (#39502308)

Huh, I thought osquery was a Facebook open source project. Surprised to see it under the Linux Foundation now. I wonder if Facebook still uses osquery in its current form or if they re-forked their own project to evolve separately in-house.

[ Parent | on HN ]

Re:Osquery: An sqlite3 virtual table exposing operating syst... by ciupicri on Sunday February 25, 2024 @12:20PM (#39502606)

From https://osquery.io/blog/osquery-foundation

> 5 years ago

> Today we are excited to announce the creation of the osquery foundation. Please read the Linux Foundation's official announcement. We have created an osquery/foundation repository on GitHub to host the technical charter.

> The official repository has been renamed from facebook/osquery to osquery/osquery.

[ Parent | on HN ]

Re:Osquery: An sqlite3 virtual table exposing operating syst... by woodruffw on Sunday February 25, 2024 @12:16PM (#39502571)

I don't know the exact dates, but Facebook turned osquery over to the community back in 2019 or 2020, after a period of uncertainly over (reasonable!) conflicting development interests[1]. It became a LF hosted project sometime after that.

(I don't know whether they still use it in-house.)

[1]: https://blog.trailofbits.com/2019/04/18/announcing-the-commu...

[ Parent | on HN ]

Re:Osquery: An sqlite3 virtual table exposing operating syst... by mikermcneil on Sunday February 25, 2024 @05:45PM (#39505712)

History (tldr): https://fleetdm.com/handbook/company#history

There’s also a podcast episode on it with two of the creators: "The story behind the creation of osquery" https://fleetdm.com/podcasts/the-future-of-device-management...

[ Parent | on HN ]