puffyCid / osquery-packs

Small collection of osquery packs

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Osquery Packs

Small collection of osquery packs. So far only Windows packs are provided. More will be added over time.
These packs have only been tested on VMs, none have been tested in any enterprise environments

Current Packs

  • Metasploit -- A few queries for common Metasploit artifacts.
  • Misc -- Collection of queries that may be useful when investigating a system compromise.

About

Small collection of osquery packs

License:Creative Commons Zero v1.0 Universal