11 ms·
Perhaps the OP means OsQuery: https://github.com/osquery/osquery https://github.com/osquery/osquery OsQuery is an SQLite extension consisting of hundreds of vi
by SQLite 2y ago
Perhaps the OP means OsQuery: https://github.com/osquery/osquery https://github.com/osquery/osquery
OsQuery is an SQLite extension consisting of hundreds of virtual tables
that provide SQL access to operating system status and configuration.
- digdugdirk 2y agoHoly smokes, that's the coolest thing I've found out about recently. I'm trying to wrap my head around where this sits within the OS. Is it a layer "on top" of everything? Or does it sit "underneath" the higher level os functionality? Apologies if that doesn't make any sense, it looks to be a really cool tool and I'll be investigating it regardless.
- SahAssar 2y agoIIRC it reads from the same sources as command line tools do, so /proc/, /sys/ etc. So it sits in the same place as `top` or similar.