Security Osquery

21 endpoints

• Get unified query history
  • GET /api/osquery/history
• Get live queries
  • GET /api/osquery/live_queries
• Create a live query
  • POST /api/osquery/live_queries
• Get live query details
  • GET /api/osquery/live_queries/{id}
• Get live query results
  • GET /api/osquery/live_queries/{id}/results/{actionId}
• Export live query results
  • POST /api/osquery/live_queries/{id}/results/{actionId}/_export
• Get packs
  • GET /api/osquery/packs
• Create a pack
  • POST /api/osquery/packs
• Delete a pack
  • DELETE /api/osquery/packs/{id}
• Get pack details
  • GET /api/osquery/packs/{id}
• Update a pack
  • PUT /api/osquery/packs/{id}
• Copy a pack
  • POST /api/osquery/packs/{id}/copy
• Get saved queries
  • GET /api/osquery/saved_queries
• Create a saved query
  • POST /api/osquery/saved_queries
• Delete a saved query
  • DELETE /api/osquery/saved_queries/{id}
• Get saved query details
  • GET /api/osquery/saved_queries/{id}
• Update a saved query
  • PUT /api/osquery/saved_queries/{id}
• Copy a saved query
  • POST /api/osquery/saved_queries/{id}/copy
• Get scheduled action results
  • GET /api/osquery/scheduled_results/{scheduleId}/{executionCount}
• Export scheduled query results
  • POST /api/osquery/scheduled_results/{scheduleId}/{executionCount}/_export
• Get scheduled query results
  • GET /api/osquery/scheduled_results/{scheduleId}/{executionCount}/results