terracatta
03/28/2018, 2:50 PMmarpaia
03/28/2018, 6:06 PMosqueryd -S
to launch osqueryi
given an osqueryd
binarydefensivedepth
03/29/2018, 1:50 PMmarpaia
03/29/2018, 4:18 PMosqueryd
and osqueryi
were originally different, statically linked binaries. each was/is like 30-40MB. let’s say you work somewhere that is actively deploying both of these binaries to all of your production servers. let’s say you have 1,000,000 servers. by combining the two (mostly the same) binaries into one, you just saved 40 terabytes worth of storage!defensivedepth
03/29/2018, 5:31 PM