fiorix
Joined 14 years ago
Karma
142
Submissions
50
Member since
Feb 27
Joined 14 years ago
By default, osquery uses glog, which means it'll output the results to a local file that you can ship anywhere you want. There's also logging plugins to help you push the results of scheduled queries to other systems.
Once you have that data flowing through your pipelines you can start doing security/anomaly detection on things.