Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
awallaby
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#general
Title
# general
d
Deepak
06/08/2021, 12:35 PM
Is there a way to read NTP information on the host? meaning, settings of chrony or ntp server on linux? This question has been asked before on the channels but unsure if there was a clear way.
s
seph
06/08/2021, 2:02 PM
I think the best way to answer that is to search the table schemas at
https://osquery.io/schema
d
Deepak
06/08/2021, 2:32 PM
I could not find a table that surfaces that. No chrony config or ntp config. The time table is only about the current date and time.
s
seph
06/08/2021, 4:59 PM
Those are the tables in osquery. If it’s not there, then it’s not there.
There might be an extension, but I’m not aware of a comprehensive list.
It might be an interesting to try to write. if you wanted to think about submitting a PR
28 Views
Post