Security Osquery
Run live queries, manage packs and saved queries.
14 endpoints
-
Get live queries
- GET /api/osquery/live_queries
-
Create a live query
- POST /api/osquery/live_queries
-
Get live query details
- GET /api/osquery/live_queries/{id}
-
Get live query results
- GET /api/osquery/live_queries/{id}/results/{actionId}
-
Get packs
- GET /api/osquery/packs
-
Create a pack
- POST /api/osquery/packs
-
Delete a pack
- DELETE /api/osquery/packs/{id}
-
Get pack details
- GET /api/osquery/packs/{id}
-
Update a pack
- PUT /api/osquery/packs/{id}
-
Get saved queries
- GET /api/osquery/saved_queries
-
Create a saved query
- POST /api/osquery/saved_queries
-
Delete a saved query
- DELETE /api/osquery/saved_queries/{id}
-
Get saved query details
- GET /api/osquery/saved_queries/{id}
-
Update a saved query
- PUT /api/osquery/saved_queries/{id}