osquery / osquery

Watch 707
Star 17.1k
Fork 2k

Code
Issues 431
Pull requests 23
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 97 Milestones 3

New pull request New

23 Open 4,030 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

bug: Set thread names correctly on macOS and Linux

bug

#6627 opened Sep 3, 2020 by theopolis • Review required

Remove prototype database implementations

database refactor

#6622 opened Aug 30, 2020 by theopolis • Review required

add a timeout to curl_certificate implementation

bug virtual tables

#6616 opened Aug 29, 2020 by nabilschear • Review required

Rejigged aarch64 port

aarch64 build libraries

#6612 opened Aug 28, 2020 by ozbenh • Approved

Eventing framework refactor

events

#6610 opened Aug 25, 2020 by alessandrogario • Draft

Add `sigurl` to get the YARA signature from https server for scan

feature

#6607 opened Aug 24, 2020 by kumarak • Review required 4.5.0

linux: process_events: add single quotes to prevent spaces from changing semantics

bug process auditing

#6603 opened Aug 21, 2020 by jax777 • Review required

systemd_units table

Linux libraries virtual tables

#6593 opened Aug 13, 2020 by rcipkins • Draft

Support for Office MRU (most recently used) entries

Windows virtual tables

#6587 opened Aug 10, 2020 by puffyCid • Changes requested

Support for Background Activity Moderator

Windows virtual tables

#6585 opened Aug 9, 2020 by puffyCid • Changes requested

Initial implementations for BPF-based socket and process events tables

Linux bpf events

#6571 opened Jul 28, 2020 by alessandrogario • Review required

Added systemD support to startup_items table

Linux virtual tables

#6562 opened Jul 21, 2020 by rcipkins • Review required

Fix process_open_sockets type error on darwin

bug macOS virtual tables

#6546 opened Jul 7, 2020 by directionless • Review required

Add version comparison functions

SQL do not merge feature

#6535 opened Jul 1, 2020 by directionless • Draft

Add --setns flag to run osqueryi in container namespace

feature

#6500 opened Jun 12, 2020 by amalone-scwx • Review required

events: Implement EndpointSecurity (macOS 10.15) based process events table

events feature macOS

#6467 opened May 26, 2020 by uptycs-sharvil • Changes requested

WIP: Add top-level decorations to status logs

feature logging needs response

#6424 opened Apr 28, 2020 by nyanshak • Review required

process_dns_events: Implement BPF-based getaddrinfo tracer

Linux bpf libraries

#6254 opened Feb 19, 2020 by alessandrogario • Draft

Port the extended_attributes table to Linux, add support for Linux capabilities

Linux virtual tables

#6195 opened Jan 22, 2020 by alessandrogario • Review required

Update SQL For getDriverImagePath

Windows help needed needs response virtual tables

#6059 opened Nov 19, 2019 by eoinmiller-r7 • Review required 0 of 6

Fix documentation typos, Markdown format, and (a few) inaccuracies

documentation needs response

#5789 opened Sep 10, 2019 by mike-myers-tob • Review required

detect encryption of ed25519 ssh keys

feature needs response virtual tables

#5526 opened Mar 14, 2019 by ostrowr • Changes requested

Fix BIOS Info table searching.

Windows bug needs response virtual tables

#5246 opened Oct 5, 2018 by sbrito85 • Review required

ProTip! Updated in the last three days: updated:>2020-08-31.