Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

*eMudhra CA key compromise*

Hi ya'll! In response to the recent <https://emudhra.we-have-a-problem.com/|eMudhra intermediate CA compromise,> we're releasing Fleet v4.93.2 today and orbit v1.62.1 tomorrow.

If you don't want to wait for the releases, Dhruv has created a guide for immediate detection and remediation through Fleet. It includes ready-made policies and scripts to find and fix affected macOS, Linux, and Windows hosts:

<https://karmine05.github.io/dirtyfrag-blog/posts/emudhra-ca-compromise-fleet/|karmine05.github.io/dirtyfrag-blog/posts/emudhra-ca-compromise-fleet>