Viewing profile — marpaia

I use cobra sometimes, it's not that cobra or mow is too heavy, but I think that the oklog-style command parsing pattern is no more code or boiler-plate than using a library (for m…

Kolide | C++ Software Engineer on osquery | Fully Remote | Fulltime | https://kolide.com/osquery Hey there! Mike Arpaia here, a Co-Founder of a host endpoint company called Kolide …

Hmn, no, not really. there is no underlying datastore for the data that you query. it's all generated on the fly.

Right now osquery only supports read operations but you're totally right; if you could kick off tasks, kill processes, unload kexts, etc. via CREATE, DELETE, etc statements, that w…

The SQL engine part of osquery is backed by SQLite's parser, lexer, query planner, etc. MySQL would be awesome as well though, mostly because of how easy it might be to integrate t…

Of course, it's an intuitive comparison to make. I'm glad you like it! I'm looking forward to working with you and similarly insightful community members on improving osquery for e…

Yup! The only reason why it's not today is because we couldn't get a formula merged into mainline homebrew until the download link was public. It is now though, so we'll sort this …

Hey, Mike Arpaia here. You're totally right in that the SQL interface is very similar to WMI. Some core differences with osquery are: - it's cross platform and supports many *nix o…