#osquery — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #osquery, aggregated by home.social.
-
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
if you like #osquery try the #postgres and #sqlite based "steampipe" toolset https://steampipe.io/
-
if you like #osquery try the #postgres and #sqlite based "steampipe" toolset https://steampipe.io/
-
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ...
Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS This article provides a guide describing how to install Osquery on Ubuntu VPS. What is Osquery? Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ... Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS This article provides a guide describing how to install Osquery on Ubuntu VPS. What is Osquery? Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ... Continued 👉
How to Install Osquery on Ubun... -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social -
How to Install #Osquery on #Ubuntu #VPS
This article provides a guide describing how to install Osquery on Ubuntu VPS.
What is Osquery?
Osquery is a lightweight, SQL-powered agent that lets you query your Linux system like a database. Need to list running processes, open ports, installed packages, or detect file changes? You can do it all with plain SELECT statements and automate them on a schedule.Below is a production-ready, step-by-step guide ...
Continued 👉 https://blog.radwebhosting.com/install-osquery-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host -
Wrote another #MCP server for fun https://github.com/mdfranz/osqueryi-mcp #osquery
-
Wrote another #MCP server for fun https://github.com/mdfranz/osqueryi-mcp #osquery
-
Memory Analysis for #Linux has always been a bit hit-or-miss. Trail of Bits has released a tool called #mquire that doesn't require debug symbols for the originating Kernel.
It also uses SQL-based queries to perform analysis, similar to #OSquery.
https://blog.trailofbits.com/2026/02/25/mquire-linux-memory-forensics-without-external-dependencies/
-
Fleet&Osquery — швейцарский нож для ИБ, или Как мы сами себя успешно ддосили
Всем привет, меня зовут Денис, и я старший инженер инфраструктурной безопасности в Ozon. Эта статья — продолжение цикла про osquery и Fleet. Предыдущие статьи вы можете почитать здесь и здесь . В статье хочу поделиться радостью и «болью» опыта эксплуатации связки Fleet и osquery в масштабе e-commerce/highload. Этот опыт будет полезен тем, кто ещё только думает об этой связке и планирует её внедрять, а также тем, кто уже внедрил и эксплуатирует. Osquery мы эксплуатируем на рабочих станциях и серверах под управлением операционных систем MacOS, Windows и Linux. Для начала стоит напомнить, что такое osquery и Fleet и почему они так классно друг друга дополняют. Osquery — opensource, написанный на С++, представляет собой агента, запущенного на хостовой (и не только) ОС, который может предоставить большое количество информации о вашей системе и событиях в виде СУБД. Также osquery имеет два вида запросов:
-
This is an awesome product! And it is getting better and better with every single release...
#OpenSource #GitOps #MDM #FleetDM #Osquery -
#osctrl 0.3.6 is released! Updates of dependencies, bug fixes and more stability. Complete rewrite of SAML/SSO authentication and more: https://github.com/jmpsec/osctrl/releases/tag/v0.3.6 #detection #infrastructure #security #osquery #DFIR #Compliance #linux #IT
-
Does anyone have up to date info on how to use #SecurityOnion with #OSQuery ? The only mention in Seconion 2.4 docs is an unhelpful "The link takes you to Kibana".
Earlier documentation had detailed steps for generating client installers, how to enable the service through
so-allow... Now all of that is gone. -
Learn #Osquery file access monitoring at #ThursdayDefensive (12:30CT) with Chris Long. Join us! https://www.reconinfosec.com/thursday-defensive/ #cybersecurity
-
While reading on the latest #noabot #malware currently in the news https://www.akamai.com/blog/security-research/mirai-based-noabot-crypto-mining and more particularly how to detect its presence https://github.com/akamai/akamai-security-research/tree/main/malware/noabot, I've discovered the very neat #osquery tool https://www.osquery.io/.
I'm impressed how easy and expressive SQL queries can be run in parallel on all my servers to query packages/configuration items/users etc ...
It's now installed everywhere 😉
-
Fun afternoon project: #Fuse mount #osquery tables as json and apache #arrow dataframes:
https://github.com/AshyIsMe/dffs -
Starting a sentence with "Know that..." in #documentation is both efficient and a power move, I'm here for it.
-
Maximizing Threat Detections of Qakbot with #Osquery
-
This is a fun way to detect #bpfdoor and other minimalist #posix #malware using #osquery
> SELECT * FROM process_open_sockets WHERE fd=0 AND NOT (family = 1 AND protocol = 0);
It traverses /proc to find processes where the first file descriptor (typically stdin) is a socket — excluding local UNIX domain sockets as some legit programs do that.
This sounds like an unlikely detector, but I've only seen backdoors like #bpfdoor behave this way.
-
Hello friends! If you are curious about open source contributions, go see my amazing coworker @cc_codes at Nebraska.code() in July. Her keynote, The Power of Open-Source: How To Contribute To and Manage Communities, will be super interesting!
-
Played with OSQuery today for the 1st time. I had no idea this was created by Facebook (now Meta). Prior to messing with it on TryHackMe, I've never heard of it.
Is this tool used widely in the infosec community?
-
New blog post: https://write.as/thomrstrom/diy-linux-kernel-rootkit-detection
TL;DR: I had fun installing a #Linux #kernel #rootkit and experimenting with detecting it from a #shellscript and #osquery.
-
osquery-defense-kit v1.8.0 is out & is our biggest release ever, containing 60+ new #osquery queries and proper CI! https://github.com/chainguard-dev/osquery-defense-kit
This is the first release that's tuned to work well on VM-based #Linux environments and the first with generalized #rootkit detection.
-
osqtool v1.2.0 is out & stable: if you've ever had to work with #osquery pack files, it probably has something for you! https://github.com/chainguard-dev/osqtool
New is a simple "run" command for osquery pack files or directories of queries.
-
Some of our brilliant #ThreatIntel team members, Amit Malik and Pratik Jeware from Uptycs, talking about #macOS #malware and the ways to leverage #osquery for detection at Nullcon.
-
I'm feeling proud of this query, as it's the culmination of #osquery tricks I've learned over the last 6 months: https://github.com/chainguard-dev/osquery-defense-kit/blob/main/detection/initial_access/sketchy-mounted-diskimage.sql
In particular, the unnatural joins using synthetically concatenated data: used to find the download URL for a likely matching DMG + finding paths to apps located within the mounts.
The downside is that if a mounted disk image has a symlink to "/" or "/Applications", the query will follow it due to #osquery limitations, which causes a performance hit.
