osquery-extensions
TDengine
osquery-extensions | TDengine | |
---|---|---|
1 | 182 | |
257 | 22,855 | |
-0.4% | 0.7% | |
1.1 | 10.0 | |
about 1 year ago | 5 days ago | |
C | C | |
Apache License 2.0 | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
osquery-extensions
-
Endpoint Isolation with osquery ?
It's definitely outside the scope of core osquery (oquery is intended to be a read-only tool). However, there have been efforts to use osquery extensions to allow making changes to the system state. See for example the Trail of Bits fwctl extension table that allows modifying firewall rules.
TDengine
What are some alternatives?
kubequery - kubequery powered by Osquery
InfluxDB - Scalable datastore for metrics, events, and real-time analytics
OSSEC - OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
TimescaleDB - An open-source time-series SQL database optimized for fast ingest and complex queries. Packaged as a PostgreSQL extension.
systeminformer - A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
QuestDB - An open source time-series database for fast ingest and SQL queries
Fail2Ban - Daemon to ban hosts that cause multiple authentication errors
fpart - Sort files and pack them into partitions
OSQuery - SQL powered operating system instrumentation, monitoring, and analytics.
bg_mon - Background worker for monitoring PostgreSQL
griddb - GridDB is a next-generation open source database that makes time series IoT and big data fast,and easy.
PipelineDB - High-performance time-series aggregation for PostgreSQL