Here's a little one-liner I like to use with @osquery to figure out what process is listening on a network port when I can't bind my dev server: osqueryi 'select * from processes join listening_ports using (pid) where port = 8080'

Team @docker, what's the plan for OSS organizations that use the free team tier with your new pricing announcement (sunsetting the free teams tier)? Are projects like @osquery no longer welcome on the platform?

Anyone know of a tool like @snyksec that supports C++ and can generate *public* reports of dependency vulnerabilities and fixes? Snyk seems to have a nice workflow but doesn't support the public reporting use case. Looking to address this issue for @osquery.

I'm very excited to release Fleet 3.0.0! We've managed to scale Fleet to over 150k hosts with the new changes, and also introduced some nice new features like Manual Labels. Check it out! #osquery github.com/kolide/fleet/rele…

Great work from the ToB folks! I blogged an example configuration and results from the ntfs_events table at dactiv.llc/blog/new-in-osque…

Did you know #osquery can dump process trees on macOS, Linux, and Windows? With a little SQL magic we can do that and more! dactiv.llc/blog/process-tree…

Wondering what's new in #osquery 4.2? All the cool new features are demonstrated in my post: dactiv.llc/blog/new-in-osque…

Announcing the release of Osquery in a Box: A simple collection of docker-compose and other configuration that will bootstrap an osquery, Fleet, ELK stack environment in under 5 mins. Been wanting to try out these technologies? Now's your chance. github.com/dactivllc/osquery… #osquery

I published osquery Monthly for October. If folks are interested in this sort of news about the #osquery community I will try to actually get these out monthly. dactiv.llc/blog/osquery-mont…