Title
#general
c

ccc

12/28/2018, 8:24 PM
is there somewhere i can find some useful queries or kibana dashboards?
zwass

zwass

12/28/2018, 8:32 PM
For queries, check out the packs in the repo (https://github.com/facebook/osquery/tree/experimental/packs) or those provided by Palantir (https://github.com/palantir/osquery-configuration).
defensivedepth

defensivedepth

12/28/2018, 9:05 PM
Also check out my osquery Cheat Sheet – Process Interrogation & Persistence Techniques - https://defensivedepth.com/2018/10/10/osquery-cheat-sheet-process-interrogation-persistence-techniques/