Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

:wave: Hello all! New Fleet user here. Somewhat old osquery user though.

Hey Ben! I remember you from your Uptycs days :slightly_smiling_face: where are you at now?

Yeah I left there last September. Running the MDR team at a consulting company now.

I'm trying to figure out if I can use osquery to bring in telemetry and event logs from some of my clients windows endpoints. I know osquery is capable of it, just not sure of the caveats around it quite yet.  

Unfortunately a lot of my uptycs knowledge doesn't directly translate because of how differently they do some things 

Sweet! Let us know how we can help from the Fleet side.