Osquery

Reported Context (2)

to distributed, query-driven investigations that interrogate endpoints in real time using tools like Osquery and Elastic Security to get answers before attackers move laterally. Elastic Demonstrates Osquery-Based DFIR From Alert to Root Cause
The platform combines Elastic Defend endpoint prevention, Osquery-enabled forensics, Device Control, and Elastic Workflows to automate containment and evidence collection for faster incident resolution; Elastic Describes XDR Workflows for Cross-Environment Security Investigations

Malware (1)

MITRE ATT&CK (9)

Vendors (1)

Products (11)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.