Site Reliability and Outage Management
Osquery: Introducing query packs

Osquery: Introducing query packs

7/20/2015

What this post added

Introduced query packs for osquery, allowing users to group queries by function or problem domain for easier distribution and updates. This feature leverages osqueryd's existing scheduler to provide data differentials and alerts. The post also details the internal use of specific query packs for incident response, vulnerability management, and OS X attacks, and encourages community contributions.

Read the original post ↗