osquery
osquery is an instrumentation framework that expose the operating system as a high-performance relational database.
- from
- Incident Response, JVM, Detection Engineering
- added
- 2026-10-10
- likes
- 0
Incident Response › IR Tools Collection > All-In-One Tools: “Easily ask questions about your Linux and macOS infrastructure using a SQL-like query language; the provided incident-response pack helps you detect and respond to breaches.”
JVM › Profilers: “osquery is an instrumentation framework that expose the operating system as a high-performance relational database.”
Detection Engineering › Logging, Monitoring & Data Sources: “A SQL-powered operating system instrumentation, monitoring, and analytics framework that exposes OS data as relational tables for querying and detection.”