Blog

Featured

How to Build Custom Osquery Tables Using ATC

Osquery's automatic table construction (ATC) enables you to dramatically expand its data collection capabilities. This article covers how to use it and how Kolide leverages it internally to power features like Device Inventory and Checks.

Latest Articles

The File Table: Osquery's Secret Weapon

Fritz Ifert-Miller

How to Write a New Osquery Table

How to Use Production Data Securely in Software Development

How to Store Your 2FA Backup Codes Securely

How to Deal With Dates and Times in Osquery

Fritz Ifert-Miller

How to Find a Mac's Manufacture Date Using Osquery

Fritz Ifert-Miller

How to Set up Windows File Integrity Monitoring Using Osquery and Kolide

Fritz Ifert-Miller

How to Find and Fix CVE-2020–0601 Using Osquery and Kolide

Fritz Ifert-Miller

How to Read Nested Complex Plists in Osquery

Fritz Ifert-Miller

Get Notified When Critical Processes Stop Running Using Kolide + Osquery

Fritz Ifert-Miller

Running Osquery As Sudo/root vs User

Fritz Ifert-Miller

How to Spotlight Search Across Every Mac With Osquery

Fritz Ifert-Miller

How to Profile Osquery Performance With Kolide

How to Monitor /etc/hosts With Osquery

Using Go for Scalable Operating System Analytics