OS Instrumentation Framework: osquery

OS Instrumentation Framework osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open...

On the Yahoo Breach, WhatsApp-Facebook, and Zerodium's $1.5M Bounty

Mike Mimoso and Chris Brook discuss the news of the week, including the latest on the Yahoo breach, Germany’s problem with WhatsApp-Facebook, Facebook osquery tool for Windows, and Zerodium’s $1.5M iOS bounty. Download: ThreatpostNewsWrapSeptember302016.mp3 Music by Chris Gonsalves...

Facebook Debuts Open Source Detection Tool for Windows

Facebook successfully ported its SQL-powered detection tool, osquery, to Windows this week, giving users a free and open source method to monitor networks and diagnose problems. The framework, which converts operating systems to relational databases, allows users to write SQL-based queries to...

Facebook Helps Combat Apple XARA Vulnerabilities With Osquery

Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...

Facebook Releases osquery to Open Source

Facebook is in a giving mood today. The social networking giant announced today that it will release to open source a framework that detects and logs state changes in an operating system likely caused by an attack or performance meltdown. It also announced that it will hand out up to $300,000 nex...