Beyond Endpoint Security Using Osquery at Scale

Securing an environment should be simple and robust and not require expensive tools. This talk will present a set of open specifications to implement endpoint security and observability using osquery and the linux audit framework. It will explain the decentralized and flexible nature of the framework, which allows organizations to integrate with open source as well as enterprise tools.