A Song for Autumn
On the Eastern Way at the city of Lo-yang At the edge of the road peach-trees and plum-trees grow; On the two sides, — flower matched by flower; Across the road, — leaf touching leaf. A spring wind…
独家优惠奖金 100% 高达 1 BTC + 180 免费旋转
Fleet user stories
Jason Walton — Director of information security @ Schrödinger
Jason Walton gives us some insight into how his team uses Fleet and osquery at Schrödinger.
How did you first get started using osquery?
I became aware of osquery a number of years ago — maybe 2017 when a colleague mentioned it. I experimented with it locally, and it was very interesting, but I never invested much time until I discovered Fleet (then Kolide Fleet) I believe around 2018.
How do your end users feel about Fleet?
Our end users don’t notice it’s there — and we have extremely technical end users. This differs from other tools like our EDR solution which can occasionally cause performance issues. It’s a very lightweight tool.
How are you dealing with alert fatigue and false positives from your SIEM?
We actually don’t use a SIEM for this reason. We rely on alerts and signals from individual tools that have high fidelity.
How could Fleet be better?
I’ll admit to not liking SQL much. It would be handy to have a query builder for simpler queries. For more advanced queries, perhaps something like Logica that compiles down to SQL but can be nicer to use would be interesting. There’s also a lot of confusion I see from newcomers to osquery and Fleet who want to know where to get results from scheduled queries. Some detailed documentation on possible solutions for this (ELK, or maybe BigQuery?) would go a long way to getting people started.
Related posts:
Mulai Melukis
Udah bulan Desember dan pandemi masih belum selesai. Sedih ya, tapi mau gimana lagi. Biar ga sedih sedih banget, bisa cari hobi supaya perasaan dan pikiran negatif bisa teralihkan. Untuk aku…
Uncovering the Truths of Life with Love
The infinite passion running in veins the sharing of compassion exhilarates the unfathomable love that heart feels the belly exploding with laughter nourishes me when love flows through this physical…
El pride no es unos tenis de Adidas.
De la misma manera en que Disney no es la realidad, el día del orgullo está lejos de ser una campaña publicitaria con la que grandes marcas buscan congraciarse con una “comunidad” estampando…