https://github.com/jmpsec/osctrl

Fast and efficient osquery management
https://github.com/jmpsec/osctrl

detection-infrastructure endpoint-security host-instrumentation incident-response infrastructure-management osquery security

Last synced: 10 days ago
JSON representation

Fast and efficient osquery management

• Host: GitHub
• URL: https://github.com/jmpsec/osctrl
• Owner: jmpsec
• License: mit
• Created: 2018-12-17T22:33:34.000Z (almost 6 years ago)
• Default Branch: main
• Last Pushed: 2024-10-28T11:21:33.000Z (14 days ago)
• Last Synced: 2024-10-28T14:46:48.603Z (14 days ago)
• Topics: detection-infrastructure, endpoint-security, host-instrumentation, incident-response, infrastructure-management, osquery, security
• Language: Go
• Homepage: https://osctrl.net
• Size: 4.24 MB
• Stars: 384
• Watchers: 9
• Forks: 51
• Open Issues: 24
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# osctrl



  

  


    Fast and efficient osquery management.

  

  


    

      

    

    

      

    

    

      

    

  


## What is osctrl?

**osctrl** is a fast and efficient [osquery](https://osquery.io) management solution, implementing its [remote API](https://osquery.readthedocs.io/en/stable/deployment/remote/) as TLS endpoint.

With **osctrl** you can monitor all your systems running osquery, distribute its configuration fast, collect all the status and result logs and allow you to run on-demand queries.

## Running osctrl with docker for development

You can use docker to run **osctrl** and all the components are defined in the `docker-compose-dev.yml` that ties all the components together, to serve a functional deployment.

Ultimately you can just execute `make docker_dev` and it will automagically build and run **osctrl** locally in docker, for development purposes.

## Documentation

You can find the documentation of the project in [https://osctrl.net](https://osctrl.net)

## Slack

Find us in the #osctrl channel in the official osquery Slack community ([Request an auto-invite!](https://join.slack.com/t/osquery/shared_invite/zt-h29zm0gk-s2DBtGUTW4CFel0f0IjTEw))

## License

**osctrl** is licensed under the [MIT License](https://github.com/jmpsec/osctrl/blob/master/LICENSE).

## Donate

If you like **osctrl** you can send [BTC](bitcoin:bc1qvjep6r6j7a00xyhcgp4g2ea2f4pupaprcvllj5) or [ETH](ethereum:0x99e211251fca06286596498823Fd0a48785B64eB) donations to the following wallets:

  

    

    

  

  

    bitcoin:bc1qvjep6r6j7a00xyhcgp4g2ea2f4pupaprcvllj5

    ethereum:0x99e211251fca06286596498823Fd0a48785B64eB