seen from Finland
seen from Denmark
seen from China
seen from United States
seen from United States
seen from China
seen from United States
seen from United States
seen from Ireland
seen from United States
seen from Denmark
seen from Canada
seen from France
seen from United States
seen from Morocco
seen from Malaysia
seen from United States
seen from China
seen from United States
seen from China
工具介紹-osquery
說明 osquery是由facebook開發的開源工具，從工具名稱就可看出，主打像取得db資料一樣的取得os資訊。 除了安裝版外，也提供免安裝版。 在進行操作前可以先瞭解osquery所提供的schema。 osqueryi使用 安裝好後使用osqueryi指令進入進行操作interface。 以下以hash schema來示範。對hash schema查詢時，必需使用where來指定檔案，或資料夾。使用資料夾時會回傳資料夾內所有檔案hash值。 osqueryi “SELECT * FROM hash WHERE path = ‘path/to/file’ “ 上面指令可以列出檔案的hash值，並把所有欄位列出。 osqueryi “SELECT * FROM hash WHERE directory = ‘path/to/directory’…
View On WordPress
Docker and osquery
If you are into security you might have heard about osquery. It is extremely powerful tool that can be used for various purposes:
Real time endpoint monitoring
Anomaly detection
File integrity monitoring
Metrics (prometheus)
Container (docker) monitoring
syslog aggregation
…
Numerous enterprises big and small from all verticals are using it, or planning on using it. It is being deployed to…
View On WordPress
Just found this project and I totally fell in love with it!
Thanks to it you can run SQL queries against your system to get information from it such as processes, networking and much more!
Check it out!
