
Featured
How to Build Custom Osquery Tables Using ATC
Osquery's automatic table construction (ATC) enables you to dramatically
expand its data collection capabilities. This article covers how to use it
and how Kolide leverages it internally to power features like Device Inventory and Checks.
Read More

Deep Dives
Why You Can't Trust Your NULLs in Osquery

Tutorials
How to Find a Mac's Manufacture Date Using Osquery

Deep Dives
Modern Macs Still Need FileVault

Inside Kolide
How Kolide Built Its macOS Screenlock Check

Deep Dives
Are Your Employees Slack Messages Leaking While Their Screen Is Locked?

Tutorials
How to Set up Windows File Integrity Monitoring Using Osquery and Kolide

Tutorials
How to Find and Fix CVE-2020–0601 Using Osquery and Kolide

Tutorials
How to Read Nested Complex Plists in Osquery

Deep Dives
macOS Catalina & Osquery

Deep Dives
Zoom Webcam Hijacking — Are Your Users Vulnerable?

Tutorials
Get Notified When Critical Processes Stop Running Using Kolide + Osquery

Tutorials
Running Osquery As Sudo/root vs User