How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Osquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By representing hardware, network, and process activity as structured data, it allows users to retrieve system state and configuration information using standard SQL syntax. The system distinguishes itself through a cross-platform abstraction layer that normalizes disparate operating system interfaces into a consistent schema across Windows, macOS, and Linux. It supports both interactive local analysis via a command-line shell and distributed fleet orchestration, where recurring qu
Rusqlite is an embedded database interface and relational database driver that provides a client library for interacting with SQLite. It functions as an SQL query wrapper, enabling the management of local file-based or in-memory databases through a safe interface. The library allows for the extension of native database capabilities by implementing custom scalar functions, collations, and virtual tables. It also supports the embedding of the database engine directly into the application binary to remove external library dependencies. The project covers a broad range of capabilities including
AlaSQL is a JavaScript SQL database engine that allows for the filtering, grouping, and joining of in-memory object arrays and JSON data. It functions as an in-memory SQL database and client-side data processor, enabling the execution of SQL statements against JavaScript arrays and external data sources in both browser and server environments. The project serves as a universal data query tool capable of performing relational joins across diverse sources, such as merging Google Spreadsheets, SQLite files, and remote APIs into a single result set. It also acts as an IndexedDB SQL wrapper, allow
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Osquery is an operating system instrumentation tool that treats system state as a relational database. It maps operating system telemetry and kernel data into virtual tables, allowing users to explore processes, hardware events, and performance data using standard SQL queries.
The main features of facebook/osquery are: SQL-Based, System State Querying, SQLite Integration, Virtual Tables, Extension APIs, System Instrumentation Frameworks, Telemetry Table Plugins, Endpoint Monitoring Agents.
Open-source alternatives to facebook/osquery include: osquery/osquery — Osquery is a unified endpoint monitoring framework that exposes operating system internals as relational tables. By… rusqlite/rusqlite — Rusqlite is an embedded database interface and relational database driver that provides a client library for… alasql/alasql — AlaSQL is a JavaScript SQL database engine that allows for the filtering, grouping, and joining of in-memory object… velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… pawelsalawa/sqlitestudio — SQLiteStudio is an open-source graphical tool for browsing, editing, and managing SQLite database files. It combines a… sqlitebrowser/sqlitebrowser — This application is a desktop utility for managing, editing, and visualizing local database files. It provides a…