Search
1 article for “OSquery”
-
Threat Detection on Linux Systems Using OSquery
Abstract: We have made an EDR tool for Linux Systems using Facebook open-source project OSquery. Making our own EDR tool rather than using a commercial EDR tool helps us gain knowledge about the platform and the security aspect of the platform and gives us the capabilities to detect and investigate security events. In our method, we are collecting the logs on the central server and then we are using these logs …
Published in Journal of Advances in Shell Programming Read article