osquery на Linux в 2026: SQL-запросы к endpoint'ам, Fleet и интеграция с SIEM
Практическое руководство по osquery на Linux в 2026 году: установка osqueryd, SQL-запросы к процессам, файлам и сети, управление через Fleet и отправка результатов в SIEM.
Adaeze runs platform security at a Series C fintech in Lagos, where she spent the last three years migrating a sprawling Debian estate to immutable Flatcar nodes on bare-metal Kubernetes. Before that she was a senior SRE at Andela for five years and did a two-year stint at Interswitch hardening PCI-DSS Linux hosts the old-fashioned way - Lynis scans, Bastille, and a lot of shell scripts that probably shouldn't have existed. She holds OSCP, CKS, and is one of the few people who has actually read the entire CIS Debian 12 benchmark cover to cover. She maintains a public set of OpenSCAP profiles tuned for African ISP environments where bandwidth assumptions matter. Adaeze writes about the operational side of Linux security: SSH key rotation that actually happens, log shipping that survives a reboot, and incident response runbooks people will read at 3am.
Практическое руководство по osquery на Linux в 2026 году: установка osqueryd, SQL-запросы к процессам, файлам и сети, управление через Fleet и отправка результатов в SIEM.