Herramientas de consulta SQL para endpoints
Estas herramientas open-source permiten a los equipos de seguridad ejecutar consultas SQL en endpoints distribuidos para la respuesta ante incidentes.
Herramientas de consulta SQL para endpoints
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- osquery/osquery
osquery/osquery
23,113Ver en GitHubOsquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By representing hardware, network, and process activity as structured data, it allows users to retrieve system state and configuration information using standard SQL syntax. The system distinguishes itself through a cross-platform abstraction layer that normalizes disparate operating system interfaces into a consistent schema across Windows, macOS, and Linux. It supports both interactive local analysis via a command-line shell and distributed fleet orchestration, where recurring qu
Osquery is the definitive open-source endpoint querying framework that exposes operating system internals as relational tables queriable with standard SQL, supporting agent deployment across Windows, Linux, and macOS with real-time and scheduled query execution, centralized aggregation via fleet orchestration, and built-in threat hunting packs — exactly matching the visitor's search.
C++SQL Query Schedulers - velocidex/velociraptor
Velocidex/velociraptor
3,769Ver en GitHubVelociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Velociraptor is exactly the kind of SQL-query-based endpoint threat hunting and incident response platform you're looking for, with its agent deployment, centralized server, cross-platform support, and VQL language purpose-built for interrogating hosts and detecting compromise across a fleet.
GoDistributed Query SchedulersRemote Management Agents
