Title
#general
s

slevchenko

01/24/2022, 9:44 AM
Hi everyone, does anybody know if osquery requires yara binary installed locally or it relies on builtin support via libyara ?
Stefano Bonicatti

Stefano Bonicatti

01/24/2022, 10:11 AM
osquery uses libyara and statically links all the third party libraries, so it doesn’t depend on the ones in the system.
10:21 AM
Also osquery doesn’t shell out to other binaries in the system to do its work.
10:21 AM
If that happens is a bug
s

slevchenko

01/24/2022, 12:41 PM
Thank you very much