3 ms·
Reminds me of facebook's https://osquery.io/ https://osquery.io/ does this offer anything different?
by cphoover 11y ago
Reminds me of facebook's https://osquery.io/ https://osquery.io/ does this offer anything different?
- cogs 11y agoCrab is aimed specifically at the filesystem, rather than querying devices or processes. For example wildcard matching on paths, combined with the exec function to run OS commands on the files you get back.
- michaelmior 11y agoosquery also has some level of setup overhead and requires a daemon running in the background. I don't think this is true of crab.
- sharvil 11y agoYou don't need to run the daemon. It's also possible to just use it interactively via osqueryi.
- michaelmior 11y agoThanks for clarifying. I haven't actually used osquery myself so I wasn't aware.