Osquery

Osquery is a platform designed for intrusion detection, infrastructure reliability and compliance.

Osquery

Free Trial

Show more categories

James G.

Advanced user of Osquery

★★★★★

Excellent operating system instrumentation framework for managed devices

What do you like best?

osquery allows us the opportunity to expose an operating system as a high-performance relational databases.

What do you dislike?

SQL tables can sometimes be difficult to manipulate and difficult to read.

What problems are you solving with the product? What benefits have you realized?

With osquery, I am able to use SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events, file hashes and more. SQL tables are implemented via a simple plugin and extensions API.

Review source: G2.com