Some advice for a noob please. Have been looking at Kolide (now 1password device trust) and Fleet DM which both built on osquery. Is it worth starting by learning osquery from scratch as both leverage it? There seems to be overlap in them I realise they were both once the same company.

There are a few MCP servers for OSQuery now. I can probably link one. But it lets you work with either say Fleet or directly with OSQ using natural language to help you get the answers or things your looking for. Still more basic... ish... IE tell me if FV2 is enabled, or if Chrome is installed or difference between Computer A and Computer B. But for getting the toes wet and a starting place they are pretty good.

@KiloelectronVolt what are your main objectives?

They are not the same company, and the products are focused quite differently. • Kolide originally developed Fleet, and then open sourced it. • Kolide then went on to develop other products (Still based around osquery) • FleetDM started to build a product around Fleet, and have significantly improved and changed it • Kolide was acquired by 1Password

For giggles through in fleetsmith which Apple acquired

Despite the name similarity, I’m not sure there’s any connection to fleersmith?

None what so ever they exclusively used the mdm api. Just a layer to the confusion