osquery ☆
« Back to VersTracker
Description:
SQL powered operating system instrumentation and analytics
Type: Cask  |  Latest Version: 5.23.0@0  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  @osquery  |  formulae.brew.sh
Category: Security
Tags: security monitoring instrumentation sql endpoint compliance
Install: brew install --cask osquery
About:
osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore system data and monitor for security and compliance issues. It enables deep visibility into endpoint infrastructure for threat detection and infrastructure analysis.
Key Features:
  • SQL-based interface for OS instrumentation
  • Real-time system monitoring and discovery
  • Performance and resource efficiency
  • Extensible via custom tables and plugins
  • Cross-platform support (Linux, macOS, Windows)
Use Cases:
  • Endpoint security monitoring and threat detection
  • Infrastructure asset inventory and compliance auditing
  • Incident response and forensic analysis
Alternatives:
  • GRR Rapid Response – Focuses on remote forensic and live analysis at scale
  • Wazuh – Provides SIEM/XDR capabilities with agent-based monitoring
Version History
Detected Version Rev Change Commit
May 5, 2026 8:05pm 5.23.0 0 VERSION_BUMP a78b75c1
Mar 19, 2026 1:30pm 5.22.1 0 VERSION_BUMP 4fc4a73a
Jan 11, 2026 10:14pm 5.21.0 0 VERSION_BUMP b485f789
Sep 8, 2025 1:32am 5.19.0 0 VERSION_BUMP 75732917
Jan 16, 2024 2:07pm 5.11.0 0 VERSION_BUMP a7654f95
Oct 24, 2023 3:38pm 5.10.2 0 VERSION_BUMP 0a84b05c
Mar 29, 2023 7:08pm 5.8.2 0 VERSION_BUMP 37b04620
Mar 15, 2023 7:25am 5.8.1 0 VERSION_BUMP 1205f5d2
« Back to VersTracker  |  Browse Packages  |  About