osquery topic
DuckSysEye
SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
goquery
Provide a shell like interface by utilizing osquery's distributed API
kolide-quickstart
[DEPRECATED] A quickstart demo for Kolide tools
osquery-defense-kit
Production-ready detection & response queries for osquery
system_policy
osquery table extension that allows querying of information from the macOS private SystemPolicy.framework
orbit
Fleet's lightweight osquery runtime and autoupdater.
hubblestack_data
Data files for use with hubble
plgx-esp
Community Edition of the PolyLogyx Endpoint Security Platform; An open source and extensible platform to manage and monitor endpoints, based on osqery agent
osquery-starter-kit
A starter-kit for a source-controlled, CLI-based osquery management workflow.