Osquery - General Threads

Channels

Topic	Authors	Views	Replies	Activity
I am just curious about an error I getting trying to enroll my first machine, is there place to ask such a question? \	d	0	3	2 years ago
Why is this timeout hardcoded to 16? In the file osquery\remote\transports\tls.cpp `options.follow_redirects(true).always_verify_peer(verify_peer_).timeout(16);`		0	3	2 years ago
Hello team, I need to write an extension for osquery, and I will be using kolide/osquery-go to register tables and config plugins, Is there a way to get access to the flags that was passed to the osqueryd daemon via osqu...	p	0	3	2 years ago
Does anyone here have a recent nightly build of the osquery master for Windows and can provide it to me? I would like to test a bugfix…	s	0	4	2 years ago
@fritz and @alessandrogario thank you	d	0	2	2 years ago
Hi @Diego Erazo , there is the `patches` table (eg. `SELECT * FROM patches;` or if that doesn't have what you are looking for I wrote a query to scan the registry for KBs: `WITH patch_packages AS ( SELECT path, key, ty...`	f	1	2	2 years ago
Stupid question: Is it possible to build Osquery for Windows on a Mac or Linux machine? If so, how? Just change the target? Background: I want to test a feature in the current master on Windows and can’t find a build/nig...	j	0	2	2 years ago
Hi all! I have a question on sharding (restricting the query to a percentage of the target hosts). Does sharding pick the same hosts every time? For example, if we shard to %15 of hosts, can we expect the same hosts to b...	m	0	2	2 years ago
hello, has anyone had to deal with the watchdog constantly killing your osquery worker? `sudo osqueryd --verbose I0303 01:48:58.604156 27155 init.cpp:418] osquery initialized [version=4.1.2] I0303 01:48:58.617558 2...`	s	1	2	2 years ago
Has anyone else seen `chrome_extensions` returning multiple identical results in version 4.2? The same query in version 4.0.2 doesn't have the duplicate results (the fields not selected are also identical)	s	1	3	2 years ago

d
I am just curious about an error I getting trying to enroll my first machine, is there place to ask such a question? \
3 Replies
2 years ago
Why is this timeout hardcoded to 16? In the file osquery\remote\transports\tls.cpp
options.follow_redirects(true).always_verify_peer(verify_peer_).timeout(16);
3 Replies
2 years ago
p
Hello team, I need to write an extension for osquery, and I will be using kolide/osquery-go to register tables and config plugins, Is there a way to get access to the flags that was passed to the osqueryd daemon via osqu...
3 Replies
2 years ago
j
Does anyone here have a recent nightly build of the osquery master for Windows and can provide it to me? I would like to test a bugfix…
4 Replies
2 years ago
d
@fritz and @alessandrogario thank you
2 Replies
2 years ago
f
Hi @Diego Erazo , there is the
patches
table (eg.
SELECT * FROM patches;
or if that doesn't have what you are looking for I wrote a query to scan the registry for KBs:
WITH patch_packages AS ( SELECT path, key, ty...
2 Replies
2 years ago
j
Stupid question: Is it possible to build Osquery for Windows on a Mac or Linux machine? If so, how? Just change the target? Background: I want to test a feature in the current master on Windows and can’t find a build/nig...
2 Replies
2 years ago
m
Hi all! I have a question on sharding (restricting the query to a percentage of the target hosts). Does sharding pick the same hosts every time? For example, if we shard to %15 of hosts, can we expect the same hosts to b...
2 Replies
2 years ago

hello, has anyone had to deal with the watchdog constantly killing your osquery worker?

sudo osqueryd --verbose
I0303 01:48:58.604156 27155 init.cpp:418] osquery initialized [version=4.1.2]
I0303 01:48:58.617558 2...

2 Replies

2 years ago

Has anyone else seen
chrome_extensions
returning multiple identical results in version 4.2? The same query in version 4.0.2 doesn't have the duplicate results
(the fields not selected are also identical)
3 Replies
2 years ago