Tools für SQL-Abfragen auf Endpunkten
Diese Open-Source-Tools ermöglichen es Sicherheitsteams, SQL-Abfragen über verteilte Endpunkte hinweg für die Incident Response auszuführen.
Tools für SQL-Abfragen auf Endpunkten
Finde die besten Repos mit KI.Wir suchen mit KI nach den am besten passenden Repositories.
- osquery/osquery
osquery/osquery
23,113Auf GitHub ansehenOsquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By representing hardware, network, and process activity as structured data, it allows users to retrieve system state and configuration information using standard SQL syntax. The system distinguishes itself through a cross-platform abstraction layer that normalizes disparate operating system interfaces into a consistent schema across Windows, macOS, and Linux. It supports both interactive local analysis via a command-line shell and distributed fleet orchestration, where recurring qu
Osquery is the definitive open-source endpoint querying framework that exposes operating system internals as relational tables queriable with standard SQL, supporting agent deployment across Windows, Linux, and macOS with real-time and scheduled query execution, centralized aggregation via fleet orchestration, and built-in threat hunting packs — exactly matching the visitor's search.
C++SQL Query Schedulers - velocidex/velociraptor
Velocidex/velociraptor
3,769Auf GitHub ansehenVelociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Velociraptor is exactly the kind of SQL-query-based endpoint threat hunting and incident response platform you're looking for, with its agent deployment, centralized server, cross-platform support, and VQL language purpose-built for interrogating hosts and detecting compromise across a fleet.
GoDistributed Query SchedulersRemote Management Agents
