Outils de requêtage SQL pour endpoints
Outils open source permettant aux équipes de sécurité d'exécuter des requêtes SQL sur des endpoints distribués pour la réponse aux incidents.
Outils de requêtage SQL pour endpoints
Trouvez les meilleurs dépôts grâce à l'IA.Nous recherchons les dépôts les plus pertinents grâce à l'IA.
- osquery/osquery
osquery/osquery
23,113Voir sur GitHubOsquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By representing hardware, network, and process activity as structured data, it allows users to retrieve system state and configuration information using standard SQL syntax. The system distinguishes itself through a cross-platform abstraction layer that normalizes disparate operating system interfaces into a consistent schema across Windows, macOS, and Linux. It supports both interactive local analysis via a command-line shell and distributed fleet orchestration, where recurring qu
Osquery is the definitive open-source endpoint querying framework that exposes operating system internals as relational tables queriable with standard SQL, supporting agent deployment across Windows, Linux, and macOS with real-time and scheduled query execution, centralized aggregation via fleet orchestration, and built-in threat hunting packs — exactly matching the visitor's search.
C++SQL Query Schedulers - velocidex/velociraptor
Velocidex/velociraptor
3,769Voir sur GitHubVelociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Velociraptor is exactly the kind of SQL-query-based endpoint threat hunting and incident response platform you're looking for, with its agent deployment, centralized server, cross-platform support, and VQL language purpose-built for interrogating hosts and detecting compromise across a fleet.
GoDistributed Query SchedulersRemote Management Agents
