Recent submissions

Comment · 8 years ago
Comment · 9 years ago
You can configure osquery to execute periodic queries (scheduled queries) of all kinds: computing md5 of your binaries and other files, taking a snapshot of sockets/connections per process, and so on.

By default, osquery uses glog, which means it'll output the results to a local file that you can ship anywhere you want. There's also logging plugins to help you push the results of scheduled queries to other systems.

Once you have that data flowing through your pipelines you can start doing security/anomaly detection on things.

Comment · 9 years ago
answer is in the title
Comment · 9 years ago
Comment · 9 years ago
Comment · 11 years ago
Long due.
Comment · 11 years ago
Comment · 12 years ago
This is awesome
Comment · 12 years ago
Comment · 12 years ago
Yeah, thank you!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton