Turn On the Lights
summary
Companies often install opaque agents to monitor devices and osquery plus Postman reveals what those agents report. osquery is a lightweight open source agent that exposes device state as SQL tables; Fleet is an MIT-licensed central hub that osquery agents talk to, offering a live query interface and APIs, scheduled queries and sinks (S3, SIEMs, Postman) for integration. Fleet is production-proven across Fortune 1000s, demos run queries across 50,000 hosts, and the project is actively developed (159 stars on the preview repo).
AI-written summary · about
chapters (9)
- 0:00Start
- 1:28Your servers.
- 2:08Your work laptop
- 3:35Your smartphone
- 10:10Transparency
- 16:09Beyond the agent
- 19:04Open source
- 20:10Open core
- 21:05Interoperability
related talks
19mSecuring the endpoint with open software
20mLeveraging Osquery for DFIR at Scale
27mThou Shalt Query: Compliance Ideas with Osquery
22mUsing osquery as an SSH replacement for remote host investigation
22mIntrospecting your machines with osquery
40mBeyond Endpoint Security Using Osquery at Scale
24mAirbnb's 5 year osquery adventure
46m2014.10.29 - Security@Scale - Mike Arpaia, Facebook