3 ms·
So they have reinvented Windows Management Instrumentation (WMI)? I think it even uses similar pseudo-SQL queries. Thank you, I'll stay with the Microsoft solu
by revelation 10y ago
So they have reinvented Windows Management Instrumentation (WMI)? I think it even uses similar pseudo-SQL queries.
Thank you, I'll stay with the Microsoft solution that will still work in 10 years.
- Nullabillity 10y agoExcept WMI is, as the name implies, Windows-only.
- withzombies 10y agoThe blog post by the team that did the port (Trail of Bits), mentions that it uses wmi and shims the data into osquery. https://blog.trailofbits.com/2016/09/27/windows-network-security-now-easier-with-osquery/ https://blog.trailofbits.com/2016/09/27/windows-network-secu...
- samfisher83 10y agoThat was what I was thinking. I use it all the time.
- sweis 10y agoExcept that it works on Linux and Mac.
- jpfed 10y agoWML queries over WMI do not give you the full generality of SQL, though.