Osquery:facebook open Source, an SQL-based operating system detection and monitoring framework

The osquery is an OS detection framework for OSX and Linux. It exposes the operating system to a high-performance relational database that allows users to write SQL queries to view operating system data. In osquery, SQL tables represent abstract concepts like the following:

A Running process

Loaded kernel modules

Open a network connection

Osqueryi is the interactive query console in Osquery. It allows the user to execute statements like the following, getting the PID, name, and port of the process in the operating system that is listening on all ports in the OS:

Osquery> SELECT DISTINCTwww.mlybyby.com

...> Process.name,

...> Listening.port,

...> Process.pid

...> from processes as process

...> JOIN Listening_ports as Listening

...> on process.pid = Listening.pid

...> WHERE listening.address = ' 0.0.0.0 ';

Many tables already exist in Osquery, and users can list all tables using the ". Table" command on the osquery command line, and you can also create new tables as needed. With these tables, users can:

Execute queries as needed to see the state of the operating system

Execute queries through the scheduler to monitor the distributed host operating system www.mlyrx120.com

Use the Osquery API to initiate queries from custom applications

In addition to the features mentioned above and the ease of installation, Osquery also has the following features:

osqueryd--This is a distributed host monitoring daemon in Osquery, which has high performance and low memory footprint, allowing users to execute queries across the infrastructure.

Cross-platform-although Osquery leverages the very underlying operating system APIs, it allows users to build and use it on Ubuntu, Cent OS, and Mac OS X.

Detailed on-Premises documentation www.hrbfkyy120.com

In addition, the Osquery code base is comprised of high-performance modular components, and its public API has clear documentation. These components can combine new, interesting applications and tools.

Osquery:facebook open Source, an SQL-based operating system detection and monitoring framework