GitHub – facebook/osquery: SQL powered operating system instrumentation, monitoring, and analytics.
Posted by jpluimers on 2020/03/09
Boy, I wish I had found this years ago: [WayBack] GitHub – facebook/osquery: SQL powered operating system instrumentation, monitoring, and analytics.
No more remembering all those nifty configuration and log file details by heart, just install and query using SQL.
Now you need to learn a “database” schema, however that’s the same for all supported operating systems.
Example installation steps:
brew install osquery- Get the official downloads for your OS from the osquery.io site.
Run interactively through osqueryi, then perform .help or .schema to get an impression of what is possible.
There is lots of documentation at [WayBack] osquery.
–jeroen
Leave a Reply