https://github.com/lbonanomi/geosnitch

Expose Linux and Windows laptop geolocation in osquery
https://github.com/lbonanomi/geosnitch

kolide osquery osquery-extension

Last synced: about 1 month ago
JSON representation

Expose Linux and Windows laptop geolocation in osquery

• Host: GitHub
• URL: https://github.com/lbonanomi/geosnitch
• Owner: lbonanomi
• License: mit
• Created: 2024-11-13T16:39:39.000Z (about 2 months ago)
• Default Branch: main
• Last Pushed: 2024-11-21T01:34:46.000Z (about 2 months ago)
• Last Synced: 2024-11-21T02:24:29.592Z (about 2 months ago)
• Topics: kolide, osquery, osquery-extension
• Language: Go
• Homepage:
• Size: 5.86 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
## GeoSnitch

A proof of concept [osquery](https://github.com/osquery/osquery) extension to determine a user's current physical location by municipality, based-on the device's wifi site survey and calculated by Google.  

This system was designed to determine if a user accessing a FedRamp environment was respecting the geography-based firewall rule by employing a VPN.  

Tested successfully on Windows 10 and Pop!OS.  

MacOS is _not supported_ due to Apple sterilizing location information.  

### Running this thing

Start osquery as `osqueryi --extensions_socket=~/.osquery/shell.em`  

_THEN_ start daemon as `./GeoSnitch --socket ~/.osquery/shell.em`