Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hello Joel, LOL, it usually takes less than 15 minutes. In your case, does it make sense to coordinate our conversation with the one we are having with Jason Dettbarn?

Awesome! I don't think that's necessary at the moment. I'm looking forward to trying out your product :smile:

Hello <@U1M63TQ9K>. I was looking on your blog post about osquery on Kubernetes : <https://www.uptycs.com/blog/securing-containers-running-in-hosted-orchestration-services>. Can you share details and if there is any osquery image built for it? The problem is that in osquery source code it is hardcoded the path to /proc so then in the DaemonSet we need to mount /proc as /host/proc for instance, but then osquery will not see it without replacing in the source code and recompiling which is something we did and worked, but not clean. K8s is not using docker but directly containerd so the docker tables are not working either. Any input would be appreciated. Also, if Uptycs has something for this please let me know! Thank you!!

Hi <@UM3DP4YDP> - yes, we can provide an osquery image that can be used for this part as part of the Uptycs platform (i.e. with a matching Uptycs account). As part of the setup there is a config file that you can set things like the /host/proc mount. We’ve also done some work to ensure the image can operate in a containerd environment as well. Happy to chat further about this if you want more info.

Awesome <@UG5EJ1C3S>! Thank you for your reply! I'll ping you.

which open source fleet management tool support file carving ??

? none that I know of. If you do, please let me know

ddd-1.gif

hey all - just want to be up front here - spamming the same article on the #osquery twitter hashtag over and over by the same 3 people for days on end does not make me want to click it anymore than if it was just posted a couple times here and there

Thanks for checking in.  This was not on our radar. I can definitely appreciate where you’re coming from. I’ll point this out to the media network and get this sorted out.

kubequery_tables.png

Hi folks!
I can't understand why after deploying kubequery only a limited number of tables are available and nothing about kubernetes?
<@U4RTY3JFP> perhaps you know and can help with the problem.

Best regards!

thx i fix it
append into kubequery.flag disable_extensions=false

Hi Everyone, I wanted to let you know about <@U02EEMX4389>'s monthly webinar series, Uptycs Live. Each month, he hosts a different subject-matter expert to discuss a particular use case and how Uptycs can help. For August, we're covering updated vulnerability scanning features for hosts and containers. <https://www.uptycs.com/uptycs-live-monthly-webinar-series>

** DISCOUNT AVAILABLE FOR UPTYCS CUSTOMERS **
For people located in the Bay Area, osquery@scale 2022 is coming up next week (Sept 14-15) at The Exploratorium in San Francisco! We have a great line-up of speakers from Stripe, Netflix, HashiCorp, FleetDM, and more. Tickets are still available!  <https://www.osqueryatscale.com/>

Hi folks! Why did you stop developing the kubequery open source project?
<https://github.com/Uptycs/kubequery>
<@U4RTY3JFP>

Hi <@U03N9B3S43E> - I’ve reached out to the Devs to get you an answer here. Someone else should be along shortly!

Uptycs is doing a cool promo where you can get a one-year subscription to our full product (including customer success/support) for just $1. Good for up to 1,000 assets (endpoints, cloud accounts, etc). Offer valid through Dec 31.

Plus, there's a great video commercial on the microsite.

<https://www.uptycssecretmenu.com/>