Osquery - General Threads

Channels

Topic	Authors	Views	Replies	Activity
Hey Folks, How can we determine which config is bing used by osqury agents. When i run a query about the configs i get the same hash so thats good but i want to know which config is being used. When i try to calc the h...	a	0	3	2 years ago
Hello, I wrote a couple extensions for OsQuery that have long run times as much as 30 seconds. When scheduling them to both run every 300 seconds in a pack, they sometimes run at the same time, or at least overlap. Is th...	a	0	2	2 years ago
Hi, I noticed that after updating from v3.3.2 the `last` table only shows logins (type 7). After pulling hairs and compiling osquery myself, I found this PR: https://github.com/osquery/osquery/pull/5274 (btw I couldn’t...	j	0	3	2 years ago
Hey Folks, I have 3k osquery enrolled in kolide fleet, and I’m aiming for 50k machines to be enrolled. But from my test group i started to see some issues with kolide fleet(open source) which i can clarify later. My que...	a	1	3	2 years ago
Mind if I ask what you are trying to achieve, is there a specific issue to address?	t	2	2	2 years ago
Hello Everyone I m joshua I need One help regarding the osquery I know Using `osquery` I m able to monitor the `docker` is there any way to send the alert from os query to slack for example If I m running the previlaged...	j	0	2	2 years ago
are there any negative effects from pinning the build to only use libc++?	a	1	4	2 years ago
Hello are there any open source / commercial EDR / SIEM integrated solutions around OSQuery that satisfy SOC2 / other compliance requirements? Thanks	r	0	4	2 years ago
Has anyone done the perf testing included with osquery? the documentation is a bit sparse and I'm trying to understand the output in a meaningful way	z	1	3	2 years ago
just curious: will 4.1.2 be pre-release or an official release?	c	0	3	2 years ago

a
Hey Folks, How can we determine which config is bing used by osqury agents. When i run a query about the configs i get the same hash so thats good but i want to know which config is being used. When i try to calc the h...
3 Replies
2 years ago
t
Hello, I wrote a couple extensions for OsQuery that have long run times as much as 30 seconds. When scheduling them to both run every 300 seconds in a pack, they sometimes run at the same time, or at least overlap. Is th...
2 Replies
2 years ago
j
Hi, I noticed that after updating from v3.3.2 the
last
table only shows logins (type 7). After pulling hairs and compiling osquery myself, I found this PR: https://github.com/osquery/osquery/pull/5274 (btw I couldn’t...
3 Replies
2 years ago
a
Hey Folks, I have 3k osquery enrolled in kolide fleet, and I’m aiming for 50k machines to be enrolled. But from my test group i started to see some issues with kolide fleet(open source) which i can clarify later. My que...
3 Replies
2 years ago
Mind if I ask what you are trying to achieve, is there a specific issue to address?
2 Replies
2 years ago
j
Hello Everyone I m joshua I need One help regarding the osquery I know Using
osquery
I m able to monitor the
docker
is there any way to send the alert from os query to slack for example If I m running the previlaged...
2 Replies
2 years ago
are there any negative effects from pinning the build to only use libc++?
4 Replies
2 years ago
z
Hello are there any open source / commercial EDR / SIEM integrated solutions around OSQuery that satisfy SOC2 / other compliance requirements? Thanks
4 Replies
2 years ago
z
Has anyone done the perf testing included with osquery? the documentation is a bit sparse and I'm trying to understand the output in a meaningful way
3 Replies
2 years ago
c
just curious: will 4.1.2 be pre-release or an official release?
3 Replies
2 years ago