Hello, can I use osquery to determine if Tenable N...
# general
d
Hello, can I use osquery to determine if Tenable Nessus Agent is linked to the server? Currently I do it by running shell command
nessuscli agent status
, which in output shows
Link status: not linked to a manager
f
natively no not that im aware of but that doesn't mean you can't get creative and write a custom detection. do you know how that nessuscli command determines status? if it is based on a process running or not, you can try hitting the
processes
table, if it determiens it from a network connection, you can try keying in on the network table, registry key, same idea.
d
too bad. thanks anyway.