Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
awallaby
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
beyond-identity
fleet
vendor-feeds
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#general
Title
# general
s
slevchenko
01/24/2022, 9:44 AM
Hi everyone, does anybody know if osquery requires yara binary installed locally or it relies on builtin support via libyara ?
s
Stefano Bonicatti
01/24/2022, 10:11 AM
osquery uses libyara and statically links all the third party libraries, so it doesn’t depend on the ones in the system.
💯 2
Also osquery doesn’t shell out to other binaries in the system to do its work.
If that happens is a bug
👍 2
s
slevchenko
01/24/2022, 12:41 PM
Thank you very much
3 Views