Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://github.com/jmpsec/osctrl/pull/1012|#1012 Create alerts from node view>
Pull request opened by <https://github.com/javuto|javuto>
Creating alerts from node view: Inactive, active and logs match.
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>

<https://github.com/jmpsec/osctrl/pull/1012|#1012 Create alerts from node view>
Pull request merged by <https://github.com/javuto|javuto>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>