Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://github.com/jmpsec/osctrl/pull/1026|#1026 Enable audit logs for MCP actions>
Pull request opened by <https://github.com/javuto|javuto>
*Summary*

• Completed Phase 4 MCP audit visibility wiring.
• Enabled filtering MCP audit entries with audit type `11` in the frontend route schema.
• Added regression tests for MCP audit filtering and MCP tool-call audit outcomes.
• Updated audit log type coverage and handler docs.
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>

<https://github.com/jmpsec/osctrl/pull/1026|#1026 Enable audit logs for MCP actions>
Pull request merged by <https://github.com/javuto|javuto>
<https://github.com/jmpsec/osctrl|jmpsec/osctrl>