osquery 开源项目推荐（170 个）

fleetdm /fleet

打开设备管理

xxh /xxh

🚀 Bring your favorite shell wherever you go through the ssh. Xonsh shell, fish, zsh, osquery and so on.

clong /DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

kolide /fleet

A flexible control server for osquery fleets

palantir /osquery-configuration

A repository for using osquery for incident detection and response

zentralopensource /zentral

Zentral 是企业中安全、可观测 Apple 端点的控制平面。配置、观测并强制执行每个 Apple 端点的期望状态。通过 GitOps 和 Terraform 将该期望状态作为代码进行管理。

chainguard-dev /osquery-defense-kit

Production-ready detection & response queries for osquery

cyberdefenders /DetectionLabELK

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

jmpsec /osctrl

Fast and efficient osquery management

kolide /launcher

Osquery 启动器、自动更新器和打包器

osquery /osquery-go

Go bindings for osquery

hubblestack /hubble

哈勃是一个模块化、开源的安全合规框架。该项目提供按需基于配置文件的审计、实时安全事件通知、警报和报告。

trailofbits /osquery-extensions

osquery extensions by Trail of Bits

aquasecurity /kube-query

[EXPERIMENTAL] Extend osquery to report on Kubernetes

Kirtar22 /ThreatHunting_with_Osquery

Threat Hunting & Incident Investigation with Osquery

bgenev /impulse-xdr

Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.

jgamblin /quickinstall

Shell script that sets up a fresh Ubuntu 20.04 server: OS updates, Docker, osquery and Jupyter

CityBaseInc /SIAC

SIAC 是一个基于开源技术构建的企业级 SIEM。

zercurity /zercurity

Manage, monitor and improve your cyber security posture.

emirozer /exposq

Go app that dispatches osquery to multi-machines