is there somewhere i can find some useful queries ...
# general
c
is there somewhere i can find some useful queries or kibana dashboards?
z
For queries, check out the packs in the repo (https://github.com/facebook/osquery/tree/experimental/packs) or those provided by Palantir (https://github.com/palantir/osquery-configuration).
👍 3
d
Also check out my osquery Cheat Sheet – Process Interrogation & Persistence Techniques - https://defensivedepth.com/2018/10/10/osquery-cheat-sheet-process-interrogation-persistence-techniques/
👍 1