osquery extensions by Trail of Bits
☆275Apr 12, 2023Updated 3 years ago
Alternatives and similar repositories for osquery-extensions
Users that are interested in osquery-extensions are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A repository for using osquery for incident detection and response☆900Sep 8, 2025Updated 11 months ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆811May 11, 2023Updated 3 years ago
- Fast and efficient osquery management☆517Updated this week
- A flexible control server for osquery fleets☆1,098Dec 15, 2020Updated 5 years ago
- ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems☆16Jan 9, 2018Updated 8 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- an osquery fleet manager☆622Dec 8, 2022Updated 3 years ago
- Go bindings for osquery☆433Jun 30, 2026Updated 2 months ago
- ☆15Nov 11, 2015Updated 10 years ago
- Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of ev…☆879Updated this week
- An osquery extension for endpoint engineers☆131Aug 19, 2026Updated last week
- ☆17Oct 27, 2017Updated 8 years ago
- Python bindings for osquery's Thrift API☆309Jul 24, 2024Updated 2 years ago
- Osquery launcher, autoupdater, and packager☆541Updated this week
- Osquery Mangement Server☆114Aug 7, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆127Jun 22, 2026Updated 2 months ago
- Golang command line tool for the macOS Endpoint Security Framework☆29Nov 25, 2019Updated 6 years ago
- Deploy Kolide's Fleet into AWS using Terraform.☆16Apr 18, 2018Updated 8 years ago
- checks site content against known good ssdeep hash, identifies matches☆10Jun 2, 2019Updated 7 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆85Jan 9, 2022Updated 4 years ago
- [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.☆175Jul 1, 2020Updated 6 years ago
- Osquery Resources☆64Aug 23, 2019Updated 7 years ago
- A starter-kit for a source-controlled, CLI-based osquery management workflow.☆30Jun 1, 2018Updated 8 years ago
- OS X Strata builds upon Yelps OSXCollector, providing a user interface to analyze data collected from a potentially compromised system.☆14Jul 3, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A user-mode application authorization system for MacOS written in Swift☆299Sep 18, 2020Updated 5 years ago
- ☆87Mar 7, 2025Updated last year
- osquery table extension that allows querying of information from the macOS private SystemPolicy.framework☆33Oct 29, 2021Updated 4 years ago
- osquery Foundation Charter, Legal, and Process Documents☆15Jun 10, 2022Updated 4 years ago
- macOS application that makes use of the EndpointSecurity framework☆19Aug 1, 2019Updated 7 years ago
- SightingDB is a database for Sightings☆21Aug 23, 2026Updated last week
- Threat Hunting & Incident Investigation with Osquery☆217Mar 30, 2022Updated 4 years ago
- Moroz is a Santa server☆147May 19, 2025Updated last year
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,188Jul 26, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆12Aug 4, 2024Updated 2 years ago
- monitor macOS for malicious activity☆235Feb 5, 2025Updated last year
- Cisco Orbital - Osquery queries by Talos☆136Aug 23, 2024Updated 2 years ago
- domain name/brand infringement detector. pulls newly registered domains daily, searches variations of your company domain names and alert…☆23Feb 22, 2022Updated 4 years ago
- Recon Hunt Queries☆79May 16, 2021Updated 5 years ago
- Production-ready detection & response queries for osquery☆643Jun 26, 2026Updated 2 months ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆122Nov 19, 2020Updated 5 years ago