osquery Reviews

osquery Description

osquery, an operating system instrumentation tool for Windows, OS X and Linux is a framework that allows you to monitor and analyze your operating system at the lowest level. The tools are intuitive and performant for low-level monitoring and operating system analysis. Attackers will often leave a malicious program running, but delete the original binary from disk. This query returns all processes whose original binary was deleted. This could be an indication of a suspicious procedure. Our build infrastructure ensures new code is benchmarked, tested and analyzed. We test for memory leaks and thread safety on all supported platforms.