
Featured
Device Auth: Introducing Notify Only Check Strategy
We've introduced a new Check remediation strategy named "Notify Only" added the
capability to delay the start of Check failure notifications.
Read More

Tutorials
How to Build Custom Osquery Tables Using ATC

Tutorials
The File Table: Osquery's Secret Weapon

Tutorials
How to Deal With Dates and Times in Osquery

Deep Dives
Why You Can't Trust Your NULLs in Osquery

Tutorials
How to Find a Mac's Manufacture Date Using Osquery

Deep Dives
Modern Macs Still Need FileVault

Inside Kolide
How Kolide Built Its macOS Screenlock Check

Deep Dives
Are Your Employees Slack Messages Leaking While Their Screen Is Locked?

Tutorials
How to Set up Windows File Integrity Monitoring Using Osquery and Kolide

Tutorials
How to Find and Fix CVE-2020–0601 Using Osquery and Kolide

Tutorials
How to Read Nested Complex Plists in Osquery

Deep Dives
macOS Catalina & Osquery