osquery

system

SQL-queryable endpoint telemetry — ask the OS questions like a database.

How to run

osqueryi

Reference

https://github.com/osquery/osquery

---

Part of the Detection Engineering toolset in DetectOps.