Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://www.reddit.com/r/osquery/comments/11uo33g/endpoint_isolation_with_osquery/|Endpoint Isolation with osquery ?>
All in title. Could we imagine to be able to do that with osquery ?    submitted by   <https://www.reddit.com/user/3skr0| /u/3skr0 > 
<https://www.reddit.com/r/osquery/comments/11uo33g/endpoint_isolation_with_osquery/|[link]>   <https://www.reddit.com/r/osquery/comments/11uo33g/endpoint_isolation_with_osquery/|[comments]>