Alternatives and similar repositories for osquery-extensions:

Users that are interested in osquery-extensions are comparing it to the libraries listed below

• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆837Updated 2 years ago
• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆537Updated 2 years ago
• teoseller / osquery-attck
  Mapping the MITRE ATT&CK Matrix with Osquery
  ☆787Updated last year
• zeek / zeek-agent
  This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2
  ☆123Updated 4 years ago
• P4T12ICK / ypsilon
  Automated Use Case Testing
  ☆167Updated 6 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆240Updated 3 years ago
• mikermcneil / fleet-osquery-in-a-box
  Simple Docker-based quickstart for osquery, Fleet, and ELK stack
  ☆62Updated last year
• OktaSecurityLabs / sgt
  Osquery Mangement Server
  ☆114Updated 4 years ago
• pan-unit42 / playbook_viewer
  ☆169Updated 7 months ago
• kolide / launcher
  Osquery launcher, autoupdater, and packager
  ☆515Updated this week
• endgameinc / eqllib
  ☆160Updated 4 years ago
• google / GiftStick
  1-Click push forensics evidence to the cloud
  ☆141Updated 7 months ago
• jamf / aftermath
  Aftermath is a free macOS IR framework
  ☆493Updated 2 months ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆130Updated 5 months ago
• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 4 years ago
• sttor / awesome-osquery
  Osquery Resources
  ☆60Updated 5 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆178Updated 5 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆258Updated 4 years ago
• AbGuthrie / goquery
  Provide a shell like interface by utilizing osquery's distributed API
  ☆80Updated 4 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆498Updated 2 years ago
• PUNCH-Cyber / YaraGuardian
  Django web interface for managing Yara rules
  ☆190Updated 6 years ago
• mandiant / ShimCacheParser
  ☆275Updated last year
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆175Updated 4 months ago
• jmpsec / osctrl
  Fast and efficient osquery management
  ☆413Updated this week
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆305Updated this week
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• zercurity / zercurity
  Manage, monitor and improve your cyber security posture.
  ☆87Updated last year
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆305Updated 2 years ago