Skip to content
Osquery: Using D-Bus to query systemd data
blog.trailofbits.com | blog | #endpoint-security | #linux | #threat-hunting | #osquery | #sql | #systemd | #dbus | #d-bus
Summary
A Trail of Bits intern extended osquery on Linux: the startup_items table gained systemd support via the D-Bus API, plus a new systemd_units table for querying service data with SQL.
- Published
- Collected