Facebook will soon bring Osquery to Windows 10
Last week, Facebook announced that it will soon bring its SQL-powered detection tool, Osquery, to Windows 10. The tool has been present on macOS and Linux for more than two years, and the company finally decided to introduce it to Microsoft’s platform now.
Osquery allows users to write their own SQL-based queries, in order to detect potential malicious activities across networks. The tool also converts processes and open network connections into SQL tables, to provide better data visualization to admins.
“Today, we’re excited to announce the availability of an osquery developer kit for Windows! Security teams can now build customized osquery solutions for their Windows networks. In 2014, Facebook open sourced osquery, an SQL-powered detection tool for Linux and OS X that provides real-time insight into the state of corporate infrastructure. osquery allows you to write SQL-based queries that explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes. Having timely, reliable visibility into operations running throughout your network is critical to quickly identify and investigate anomalies.”
Partnership between Facebook and Microsoft is not the sweetest one in the industry, as Facebook often avoids or delays development of its services for Windows. However, due to a high number of requests from users, Facebook decided to bring Osquery to Windows. The tool is only available on Windows 10.
If you’re interested in using Osquery on your Windows 10 computer, you can find out how to get started here.
RELATED STORIES YOU NEED TO CHECK OUT:
- OneDrive On-Demand Sync will soon be available on Windows 10
- Windows Server 2016 and System Center 2016 to be available soon
- Focused Inbox coming to Outlook, along with more features
- Data exchance between Facebook and WhatsApp banned in one European country
- PCs running old Windows 10 builds automatically reboot starting on October 1st
Microsoft is all set to launch its next big update, Windows 10 version 1809 in October. While that should be a nice piece of news […]
The Windows 10 October 2018 Update (otherwise 18H2) rollout might now be two to three weeks away. For the last few months, new build previews […]