osquery

@osquery

osquery lets you ask questions about your Linux, Mac, and Windows infrastructure. Intrusion detection, infrastructure reliability, compliance, and more.

Menlo Park, CA
osquery.io
Joined February 2015
3 Photos and videos Photos and videos

Tweets

You blocked @osquery

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @osquery

  1. Nov 9

    Keep them coming!

    The importance of APIs in Security products is often ignored. A good API makes your product even better and us Security Engineering teams love them!
    Show this thread
    5 likes
    Undo
  2. Nov 5

    The osquery ecosystem keeps growing!

    A new Fleet for
    5 retweets 14 likes
    Undo
  3. Oct 16

    This makes bpf events very accessible: select * from bpf_process_events. You’ll have to build from tip right now, but expect these features in the next stable release (eta 1 month). Next up, EndpointSecurity process events!

    My PR implementing support in has been merged! Huge thanks to for being awesome and for being the best maintainer ever!
    1 reply 5 retweets 23 likes
    Undo
  4. Sep 25

    Here is a great end to end setup for using osquery to carve/acquire files remotely. Thanks for the in-depth description and walkthrough Ben!

    New post: Setup my GoLang Osquery-file-carving server with Kolide
    8 likes
    Undo
  5. Aug 9

    That is a lot of SQL! Congrats to the winners and to everyone who helped organize!

    We are thrilled to announce the winning teams of finals. 8M queries 91K+ scoreboard submissions 800+ participants 500+ challenges 350+ teams 260GB+ PCAPs 150GB+ endpoint telemetry 10K+ queries 20+ hours of content
    Show this thread
    1 retweet 7 likes
    Undo
  6. Retweeted
    Jul 23

    I'm very excited to release Fleet 3.0.0! We've managed to scale Fleet to over 150k hosts with the new changes, and also introduced some nice new features like Manual Labels. Check it out!

    2 replies 19 retweets 53 likes
    Undo
  7. Retweeted
    May 15

    Enjoyed my first virtual talk at and also my first blog, hope there will be more! Thanks again & for this opportunity. Here is the link to my talk: And also the link to my blog:

    4 retweets 14 likes
    Undo
  8. Retweeted
    Mar 16

    Great work from the ToB folks! I blogged an example configuration and results from the ntfs_events table at

    Real-time file monitoring on Windows with osquery
    3 retweets 5 likes
    Undo
  9. Retweeted
    Mar 16

    Real-time file monitoring on Windows with osquery

    1 reply 43 retweets 92 likes
    Undo
  10. Retweeted
    Mar 3

    Did you know can dump process trees on macOS, Linux, and Windows? With a little SQL magic we can do that and more!

    1 reply 16 retweets 31 likes
    Undo
  11. Feb 21

    osquery 4.2.0 has been released! This includes a fix for CVE-2020-1887 and a bunch of great features. Check it out at

    6 retweets 14 likes
    Undo
  12. Retweeted
    Feb 20

    Wondering what's new in 4.2? All the cool new features are demonstrated in my post:

    11 retweets 26 likes
    Undo
  13. Retweeted
    Feb 3

    Announcing the release of Osquery in a Box: A simple collection of docker-compose and other configuration that will bootstrap an osquery, Fleet, ELK stack environment in under 5 mins. Been wanting to try out these technologies? Now's your chance.

    2 replies 48 retweets 140 likes
    Undo
  14. 20 Dec 2019

    The osquery community wishes you a safe and happy holiday season! To help keep safe we’ve released a new bug fix version of osquery, v4.1.2, please check our downloads page for packages

    6 retweets 7 likes
    Undo
  15. Retweeted
    22 Oct 2019

    I published osquery Monthly for October. If folks are interested in this sort of news about the community I will try to actually get these out monthly.

    2 retweets 8 likes
    Undo
  16. 15 Sep 2019

    osquery 4.0.2 is live! This is the first stable release since we became a Linux Foundation project. Thank you everyone who opened issues, to everyone who contributed features, fixes, docs; and thank you for large contributions on all fronts!

    32 retweets 54 likes
    Undo
  17. Retweeted
    20 Jun 2019

    Today at QueryCon, Carbon Black unveiled the Query Exchange: a new place for the osquery community to find, learn, and share queries.

    1 reply 14 retweets 25 likes
    Undo
  18. Retweeted
    18 Jun 2019

    This week at QueryCon, catch a panel discussion about this newly announced partnership with the Linux Foundation to support continued development of osquery.

    We're excited to announce that the community will be working under the Linux Foundation moving forward. Developers from committed to this neutral home:
    2 retweets 8 likes
    Undo
  19. Retweeted
    18 Jun 2019

    We're excited to announce that the community will be working under the Linux Foundation moving forward. Developers from committed to this neutral home:

    2 replies 79 retweets 140 likes
    Undo
  20. Retweeted
    20 Feb 2018

    Have you been using ? Share your experience by submitting a talk to QueryCon: and join us for the first ever conference! For more information, check out

    8 retweets 15 likes
    Undo

@osquery hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·