Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

osquery_7_x_2186_(granularity_30,_sampling_30).png

osquery_code_ownership_through_time.png

osquery git analysis with Hercules: the first chart shows code by year and how it has survived; the second shows how many lines of code survive per author

Dang look at that staying power from <@U09M563C7>, what a beast!

Yeah, amazing amount of osquery written/maintained by Ted.

Cool to see how much additional contribution came from other folks starting in 2018-19 as well.

Clearly I needed to diversify my hobbies. :wink:

Right, that 2019 shift brings a huge smile to my face! My guess is the effort from <@UF63BUA3A> and crew within CMake and Azure made osquery development much more accessible to others.

Big shout out to the massive pink-striped block!

I was going to wait until 2021 but osquery has changed name in teddyquery