Performant Endpoint Visibility
Windows, macOS, CentOS, FreeBSD, and almost every Linux OS released since 2011 are supported with no dependencies. osquery powers some of the most demanding companies, including Facebook.
Downloads →Whether your goal is intrusion detection, infrastructure reliability, or compliance, osquery gives you the ability to empower and inform a broad set of organizations within your company.
Read community articles →Our build infrastructure ensures that newly introduced code is benchmarked and tested. We perform continuous testing for memory leaks, thread safety, and binary reproducibility on all supported platforms.
Read the code →Quick-start Instructions
~ $ osqueryi
Using a virtual database.
osquery> select username, pid, host from last;
+----------+------+---------------+
| username | pid | host |
+----------+------+---------------+
| teddy | 9005 | 192.168.0.144 |
+----------+------+---------------+