Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
d
Deepak
06/08/2021, 12:35 PM
Is there a way to read NTP information on the host? meaning, settings of chrony or ntp server on linux? This question has been asked before on the channels but unsure if there was a clear way.
s
seph
06/08/2021, 2:02 PM
I think the best way to answer that is to search the table schemas at
https://osquery.io/schema
d
Deepak
06/08/2021, 2:32 PM
I could not find a table that surfaces that. No chrony config or ntp config. The time table is only about the current date and time.
s
seph
06/08/2021, 4:59 PM
Those are the tables in osquery. If it’s not there, then it’s not there.
There might be an extension, but I’m not aware of a comprehensive list.
It might be an interesting to try to write. if you wanted to think about submitting a PR
28 Views
#general
Join Slack