From the course: Linux Tips

Unlock this course with a free trial

Join today to access over 22,600 courses taught by industry experts.

Osquery

Osquery - Linux Tutorial

From the course: Linux Tips

Start my 1-month free trial Buy for my team

Osquery

“

- [Instructor] osquery is a set of tools that let you gather system information in a way that can be queried, like a relational database. Using osquery, you can construct periodic reports that show information like processes, launch items, open ports, and more in order to look for anomalies, track performance, and monitor the status of managed systems. The software site at osquery.io has some information and there's extensive documentation at osquery.readthedocs.io. Let's take a few minutes to see osquery in action. You can install osquery on many platforms in a variety of ways. To install it on my Ubuntu system, I'll click on Install on Linux and then go to the downloads page. Then I'll scroll down and follow the instructions to add the apt repository to my system. We'll fast-forward through this and when that's done, I'll install osquery using the package manager. osquery comes with three primary tools we'll work…

Contents