osquery

Open device management

🚀 Bring your favorite shell wherever you go through the ssh. Xonsh shell, fish, zsh, osquery and so on.

Automate the creation of a lab environment complete with security tooling and logging best practices

A flexible control server for osquery fleets

A repository for using osquery for incident detection and response

Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.

Production-ready detection & response queries for osquery

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

Osquery launcher, autoupdater, and packager

Fast and efficient osquery management

Go bindings for osquery

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.

osquery extensions by Trail of Bits

[EXPERIMENTAL] Extend osquery to report on Kubernetes

Threat Hunting & Incident Investigation with Osquery

Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.

SIAC is an enterprise SIEM built on open-source technology.

Go app that dispatches osquery to multi-machines

Manage, monitor and improve your cyber security posture.

Provide a shell like interface by utilizing osquery's distributed API