allister
05/10/2016, 10:29 PMosquery is a tool which, after getting over a small learning curve, can be used for purposes like host intrusion detection or for taking a basic inventory of Mac OS X computers. The open source project, which has several full-time developers dedicated to it at Facebook, was reviewed by the NCC Group as secure for use on all of there 5-digit Macs and... production server infrastructure all around the world. Since there are many security benefits that can be gained by putting it in production, we'll go over common regulated standards touched upon in the community-contributed white paper on its security, and discuss comparable tools it either complements or directly interacts with. Guidance for basic workstation hardening like CIS, NIST, PCI and HIPAA relate directly to the functionality osquery can perform, so we'll give an updated accounting to tell you where we are and where we still have left to go.