Friday, September 02, 2022

Re: Did anyone have worked in the past on OSquery port?

From a quick look, I don't think it's going to be very fun to port, many of
the tables won't work on OpenBSD, others will most likely need a fair bit
of painful patching, and unless upstream have interest it's the sort of
thing which is likely to get broken by updates often. (Note that they have
removed FreeBSD support).

--
Sent from a phone, apologies for poor formatting.

On 2 September 2022 07:54:31 Mikolaj Kucharski <mikolaj@kucharski.name> wrote:

> Hi,
>
> I didn't see anything in the archives, but maybe in some (public) repo,
> not visible at first sight there is a stab at it?
>
> https://osquery.io/
>
> Description from FreshPorts:
>
> osquery exposes an operating system as a high-performance relational
> database. This allows you to write SQL-based queries to explore
> operating system data. With osquery, SQL tables represent abstract
> concepts such as running processes, loaded kernel modules, open network
> connections, browser plugins, hardware events or file hashes.
>
> --
> Regards,
> Mikolaj

No comments:

Post a Comment