osquery

Performant endpoint visibility

osquery1 allows to quickly gather information from a single or multiple system. It’s a very powerful and reliable tool and a good alternative for a free EDR tool.

Installation

Download and install the latest release from https://osquery.io/downloads/official/5.0.1.

Fleet Managment

To manage a fleet and run recurring commands, check ouf fleet2


  1. osquery ↩︎

  2. fleet ↩︎