Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://github.com/jmpsec/osctrl/pull/713|#713 Query and carve based on tags in `osctrl-api` and `osctrl-cli`>
Pull request opened by <https://github.com/javuto|javuto>
Implementing <https://github.com/jmpsec/osctrl/issues/529|#529> and <https://github.com/jmpsec/osctrl/issues/682|#682> and add the ability to run on-demand queries and file carves by tags.
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>

<https://github.com/jmpsec/osctrl/pull/713|#713 Query and carve based on tags in `osctrl-api` and `osctrl-cli`>
Pull request merged by <https://github.com/javuto|javuto>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>